Law / United States / 
Louisiana
Louisiana Data Privacy Act (Act No. 502), Attorney General enforcement
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force in 100 days, effective 1 January 2027.
An enforcement supervision rule binding private bodies.
As of 28 August 2026.
What it requires
- Expect an LDPA violation to be enforced exclusively by the Louisiana Attorney General; the Act forecloses a private right of action by name.
- Between January 1 and July 31, 2027, use the 30-day Attorney General notice-and-cure period to correct a violation and confirm the cure in writing before an investigation can proceed.
If you get it wrong
Private right of actionNo
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
The Louisiana Attorney General has exclusive authority to enforce the LDPA. A violation constitutes an unfair and deceptive trade practice under the Unfair Trade Practices and Consumer Protection Law (UTPCPL), R.S. 51:1401 et seq., but the Act expressly excludes the UTPCPL's own private-action provisions, R.S. 51:1409 and 1409.1, foreclosing a private right of action under the LDPA.
From January 1 to July 31, 2027, before bringing an action the Attorney General must give a person 30 days' written notice identifying the specific provisions violated, and may not initiate an investigation if the person cures the violation and confirms the cure in writing within that period.
When LexLint raises it
crawls_webtrains_modelsdeploys_chatbotautomated_outreach
Read the law
official Louisiana Act No. 502 (2026 Regular Session) text, as signed, Louisiana Legislature
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.