DPO SchoolDPO School

Louisiana Data Privacy Act

Louisiana privacy law: enforcement

Law as of October 28, 2026 Reviewed by Sergio Maldonado Elvira on 29 October 2026

Summary (not the statute text)

The Attorney General enforces the Act. A violation is an unfair and deceptive trade practice under the Unfair Trade Practices and Consumer Protection Law, but private actions under that law are excluded. Under that law a court may impose civil penalties, up to $5,000 per violation where it finds intent to defraud, with an additional penalty where victims are elderly or disabled. From 1 January to 31 July 2027 only, the Attorney General must give 30 days' notice and allow a cure before investigating.

Key points

  1. The Attorney General enforces the Act and must post guidance on its website.

    Section: La. R.S. 51:1780.5(A), (B)

  2. Violations are unfair and deceptive trade practices under R.S. 51:1401 et seq.

    Section: La. R.S. 51:1780.5(C)

  3. Private rights of action under R.S. 51:1409 and 1409.1 are excluded.

    Section: La. R.S. 51:1780.5(C)

  4. Civil penalty up to $5,000 per violation where the court finds intent to defraud.

    Section: La. R.S. 51:1407(B)

  5. Additional civil penalty where the practice targets elderly persons or persons with disabilities.

    Section: La. R.S. 51:1407(C)

  6. Temporary 30-day notice and cure, 1 January 2027 to 31 July 2027.

    Section: La. R.S. 51:1780.5(D)

  7. Money recovered must be used for consumer protection and education.

    Section: La. R.S. 51:1780.5(C)

Sources

Compare enforcement across all states

Related, not equivalent: the GDPR and the state laws differ in scope, terms and exceptions.

Law as of October 28, 2026.

Reviewed by Sergio Maldonado Elvira on 29 October 2026. Prepared from the official sources listed.

Official text of the Louisiana statute

Reference material, not legal advice.