Louisiana Data Privacy Act
Louisiana privacy law: processors
Law as of October 28, 2026 Reviewed by Sergio Maldonado Elvira on 29 October 2026
Summary (not the statute text)
Processors must follow controller instructions and help with consumer requests, security and breach notification under Louisiana's breach law, and assessments. A contract must set out clear instructions, nature and purpose, data types, duration and both parties' rights and obligations. It must also require confidentiality, deletion or return after the service, compliance information, cooperation with assessments (or an independent assessment), and written flow-down contracts with subcontractors.
Key points
Processors must follow instructions and assist with consumer requests, security, breach notification (R.S. 51:3071 et seq.) and assessments.
Section: La. R.S. 51:1780.4(D)(1)
Contract must state instructions, nature and purpose, data types, duration and rights and obligations of both parties.
Section: La. R.S. 51:1780.4(D)(2)(a) to (e)
Contract must require confidentiality, deletion or return after the service, and compliance information on request.
Contract must allow controller assessments; the processor may instead arrange an independent assessment and share the report.
Subcontractors only under a written contract with the same obligations.
Section: La. R.S. 51:1780.4(D)(2)(f)(v)
Controller or processor role is a fact-based question; a processor that follows instructions remains a processor.
Section: La. R.S. 51:1780.4(D)(5)
Sources
Compare processors across all states
Related GDPR articles
Related, not equivalent: the GDPR and the state laws differ in scope, terms and exceptions.
- Article 28: Processor (processors)
Law as of October 28, 2026.
Reviewed by Sergio Maldonado Elvira on 29 October 2026. Prepared from the official sources listed.
Official text of the Louisiana statute
Reference material, not legal advice.