--- title: "Louisiana privacy law: consumer rights" canonical: "https://dposchool.com/state-privacy-laws/state/louisiana/consumer-rights" source: "https://legis.la.gov/legis/ViewDocument.aspx?d=1480202" text_as_of: "2026-10-28" last_reviewed: "2026-10-29" language: "en-US" publisher: "DPO School" --- Louisiana Data Privacy Act # Louisiana privacy law: consumer rights Law as of October 28, 2026 · [Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/state-privacy-laws/about#review) ## Summary (not the statute text) Consumers may confirm processing and access their data, correct it, delete it, obtain a portable copy of data they provided (if held digitally), and opt out of targeted advertising, sale and profiling for decisions with legal or similarly significant effects. Controllers must respond within 45 days, extendable once by 45 days, and answer appeals in writing within 60 days. Responses are free up to twice a year and controllers must offer at least two request methods. An authorized agent, including a browser setting or global device setting, may opt out on the consumer's behalf, subject to conditions. ## Key points 1. Rights to confirm and access, correct, delete, and obtain a portable copy of data previously provided, if held digitally. Section: [La. R.S. 51:1780.3(A)(2)(a) to (d)](https://legis.la.gov/legis/ViewDocument.aspx?d=1480202) 2. Opt out of targeted advertising, sale, and profiling in furtherance of decisions with legal or similarly significant effects. Section: [La. R.S. 51:1780.3(A)(2)(e)](https://legis.la.gov/legis/ViewDocument.aspx?d=1480202) 3. Response within 45 days, extendable once by 45 days with notice and reasons. Section: [La. R.S. 51:1780.3(B)(2)](https://legis.la.gov/legis/ViewDocument.aspx?d=1480202) 4. Free up to twice a year per consumer; fee or refusal for manifestly unfounded, excessive or repetitive requests. Section: [La. R.S. 51:1780.3(B)(4)](https://legis.la.gov/legis/ViewDocument.aspx?d=1480202) 5. Appeal process required; written answer within 60 days; on denial, the controller must give the Attorney General's online complaint mechanism. Section: [La. R.S. 51:1780.3(C)](https://legis.la.gov/legis/ViewDocument.aspx?d=1480202) 6. At least two secure request methods; no new account may be required; online-only controllers may offer just an email address. Section: [La. R.S. 51:1780.3(E)(1) to (4)](https://legis.la.gov/legis/ViewDocument.aspx?d=1480202) 7. Contract terms that waive or limit consumer rights are void. Section: [La. R.S. 51:1780.3(D)](https://legis.la.gov/legis/ViewDocument.aspx?d=1480202) ## Sources - [Act No. 502 of 2026 (SB 386), signed act text](https://legis.la.gov/legis/ViewDocument.aspx?d=1480202) [Compare consumer rights across all states](https://dposchool.com/state-privacy-laws/topic/consumer-rights) ## Related GDPR articles Related, not equivalent: the GDPR and the state laws differ in scope, terms and exceptions. - [Article 15: Right of access by the data subject](https://dposchool.com/gdpr/article/15) (access) - [Article 17: Right to erasure (‘right to be forgotten’)](https://dposchool.com/gdpr/article/17) (deletion) - [Article 20: Right to data portability](https://dposchool.com/gdpr/article/20) (portability) ## Status Law as of October 28, 2026. [Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/state-privacy-laws/about#review). Prepared from the official sources listed. [Official text of the Louisiana statute](https://legis.la.gov/legis/ViewDocument.aspx?d=1480202) Reference material, not legal advice. ## Other topics for Louisiana - [Applicability](https://dposchool.com/state-privacy-laws/state/louisiana/applicability) - [Sensitive data](https://dposchool.com/state-privacy-laws/state/louisiana/sensitive-data) - [Controller duties](https://dposchool.com/state-privacy-laws/state/louisiana/controller-duties) - [Processors](https://dposchool.com/state-privacy-laws/state/louisiana/processors) - [Enforcement](https://dposchool.com/state-privacy-laws/state/louisiana/enforcement) ## Navigation [US State Privacy Laws](https://dposchool.com/state-privacy-laws) / [Louisiana](https://dposchool.com/state-privacy-laws/state/louisiana) / Consumer rights Previous: [Applicability](https://dposchool.com/state-privacy-laws/state/louisiana/applicability) Next: [Sensitive data](https://dposchool.com/state-privacy-laws/state/louisiana/sensitive-data) Learning US privacy law? An audio course on the privacy law that applies to US businesses: [US Privacy in Practice](https://dposchool.com/learn/courses/us-privacy-in-practice). More from [DPO School](https://dposchool.com). ## For AI agents - Machine-readable index: https://dposchool.com/state-privacy-laws/llms.txt - JSON API: https://dposchool.com/state-privacy-laws/api/v1/index.json - Vendor privacy and security facts: https://vendor.watch (API for agents) - Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api - Legal services from a California law firm, through its MCP server: https://northend.law/agents