Key Facts
Penalties
AG-enforced as an unfair trade practice; no private right of action; 30-day cure period (sunsets 2027-07-31).
Data Subject Rights
Confirm whether a controller is processing your personal data and access that data; the controller is not required to reveal a trade secret.
Correct inaccuracies in your personal data, taking into account the nature of the data and the purposes of the processing.
Have a controller delete personal data you provided or that it obtained about you; for data obtained from other sources, it may instead keep a minimal record so the data stays deleted, or opt you out of non-exempt processing.
If the data is available in a digital format, obtain a copy of the personal data you previously provided in a portable and, where technically feasible, readily usable format you can transmit to another controller.
Opt out of the processing of your personal data for targeted advertising.
Opt out of the sale of your personal data, meaning its exchange for monetary or other valuable consideration by the controller to a third party.
Opt out of solely automated profiling in furtherance of decisions that result in the provision or denial of financial or lending services, housing, insurance, health care, education enrollment, employment opportunities, criminal justice, or access to basic necessities.
Appeal a controller's refusal to act on your request, within a reasonable period after you receive the decision, through a process that is conspicuously available and similar to the request process, and receive a written explanation of the decision.
If a controller denies your appeal, it must give you the online mechanism through which you can contact the Louisiana Attorney General to submit a complaint.
Designate an authorized agent, including through a link, browser setting or extension, or global device setting, to opt out of targeted advertising or the sale of your personal data for you; this agent right does not extend to profiling or other requests.
A controller may not discriminate against you for exercising your rights, such as by denying goods or services or charging different prices, but it may offer a different price, rate, level, quality or selection if you opted out, or through a bona fide loyalty, rewards, premium features, discount or club card program.
US State Specifics
Other North America Regulations
LDPA requires you to recognize an opt-out preference signal such as Global Privacy Control. Check whether GPC is working on your site to confirm the signal reaches you and that trackers actually stop firing when it does.
Stay compliant with LDPA
ConsentStack helps you implement Opt-out consent for Louisiana, United States automatically.