The Bayou Twist: Louisiana’s $25 Million Question

Starting January 1, 2027, many companies will be subject to a new comprehensive privacy law in Louisiana. The state just adopted SB386, which applies to companies that have more than $25 million in revenue or satisfy other conditions. The compliance obligations will look familiar: Louisiana generally follows the same Virginia-style framework we saw adopted in Oklahoma and Alabama earlier this year, so the uplift will be minimal for companies building on an existing compliance program. But Louisiana adds a few important twists that will expand the scope of covered companies and create targeted compliance work.

What are the notable deviations from the norm?

Louisiana tracks most of the standard playbook—but adds three meaningful deviations: