Duty LXD-6323
Serves under-18s, in Louisiana
Each law's tag says when it binds: since in force from , in 7 weeks not yet in force
Database Security Breach Notification Law, reasonable security procedures and destruction dutysince 5 lines
La. R.S. 51:3074(A), (B) · Read the law's page
- This binds any person conducting business in Louisiana, or any person or state or local agency, that owns or licenses computerized data including personal information; unlike the Louisiana Data Privacy Act, it carries no revenue, volume, or sale-percentage threshold.
- Implement and maintain reasonable security procedures and practices appropriate to the nature of the information, to protect personal information from unauthorized access, destruction, use, modification, or disclosure.
- Take all reasonable steps to destroy or arrange for the destruction of records containing personal information no longer to be retained, by shredding, erasing, or otherwise modifying the information to make it unreadable or undecipherable.
- Expect a violation of either duty to be enforceable as an unfair trade practice, by the Attorney General for injunctive relief and, because R.S. 51:3074(J)'s deeming clause carries no exclusion of R.S. 51:1409, by a private action from a harmed Louisiana resident for actual damages, trebled if the violation was knowing after Attorney General notice, plus attorney fees and costs.
- Do not conflate this pre-existing safeguards duty with the Louisiana Data Privacy Act's own controller security-of-processing duty at R.S. 51:1780.4(A)(1)(b), a separate, later-enacted comprehensive-regime clause documented under this jurisdiction's privacy topic rather than here.
Act 618 of 2026 (HB 134), display or delivery of material harmful to minors by an interactive computer servicefrom , in 7 weeks3 lines
La. R.S. 9:2717.2.1 · Read the law's page
- Applies to an interactive computer service, meaning any information service, system, or access software provider that provides or enables computer access by multiple users to a computer server, that enters into a contract with a minor, including the creation of an online account; a minor is a person under eighteen who is not emancipated.
- Do not deliver or display to a minor account material harmful to minors, as section 51:2121 of the Louisiana Revised Statutes defines it, that the service created or developed in whole or in part.
- If the Attorney General gives written notice of an alleged violation, cure it within forty-five days of receiving the notice by giving the Attorney General a written statement that the violation is cured and no further violations will occur; a violation left uncured, or a further violation after the notice, may be sued on.
Kids Online Protection and Anti-Grooming Act: a covered platform may not disclose a minor's precise geolocationfrom , in 7 weeks1 line
La. R.S. 9:2717.4(C)(3) (Acts 2025, No. 236, as amended by Acts 2026, No. 552) · Read the law's page
- If you own or operate an online platform, online video game, messaging application or video streaming service that is used by a minor, do not disclose or share the minor's precise geolocation with anyone other than the minor's legal representative or a law enforcement representative authorized by law to receive it, unless the minor's legal representative has given express consent to opt out.