Louisiana Enacts Nation’s Twenty-Second State Comprehensive Privacy Law

On May 29, 2026, Louisiana Governor Jeff Landry signed the Louisiana Data Privacy Act (LDPA) into law, making Louisiana the twenty-second state to enact a comprehensive privacy law and the third to do so this year, following Oklahoma and Alabama. The LDPA takes effect January 1, 2027, giving covered businesses approximately seven months to prepare for compliance.

The LDPA applies to entities that conduct business in Louisiana and either (1) have an annual gross revenue exceeding $25 million; (2) annually buy, receive, sell or share the personal information of 75,000 or more consumers, households or devices; or (3) derive 50% or more of their annual revenue from selling consumers’ personal information. The law broadly defines “sale” to include exchanges of personal data for “monetary or other valuable consideration,” consistent with the Connecticut-style approach and broader than the monetary-only definitions seen in states like Oklahoma.