Law / United States / Louisiana

Louisiana Data Privacy Act (Act No. 502), sensitive and biometric data

La. R.S. 51:1780.1(3), (29)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force in 100 days, effective 1 January 2027.

A sensitive categories rule binding private bodies.

As of 28 August 2026.

What it requires

  • Treat an identifier deliberately extracted from a photograph, video, or audio recording to identify a specific Louisiana resident as biometric and sensitive data under the LDPA, notwithstanding the recording's own public or non-public origin.
  • Obtain a Louisiana consumer's consent before selling sensitive data, if you meet the LDPA's revenue-from-sale applicability threshold.
  • Treat genetic data, health diagnosis information, racial or ethnic origin, religious belief, sexuality, immigration status, a known child's data, and precise geolocation as sensitive data requiring heightened handling.

What it reaches

Excludes recording-derived identifiersNo

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Sensitive data under the LDPA includes personal data revealing racial or ethnic origin, religious belief, a mental or physical health diagnosis, sexuality, or citizenship or immigration status; genetic or biometric data processed to uniquely identify an individual; a known child's personal data; and precise geolocation data.

Biometric data means data generated by automatic measurement of an individual's biological characteristics used to identify a specific individual, such as a fingerprint, voiceprint, or eye retina or iris scan.

The definition excludes a physical or digital photograph, or data generated from a photograph, video, or audio recording, but claws that exclusion back whenever the data is generated to identify a specific individual, so a voiceprint or faceprint deliberately extracted from a recording for identification purposes remains biometric and sensitive data regardless of the recording's own origin or public status.

A person selling sensitive data under the Act's revenue-from-sale applicability threshold must first obtain the consumer's consent.

When LexLint raises it

  • processes_biometrics
  • processes_voice
  • crawls_web
  • trains_models

Read the law

official Louisiana Act No. 502 (2026 Regular Session) text, as signed, Louisiana Legislature

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example  ·  Lint your app