The Solution
CookieHub CMP
The complete, fully-automated consent management platform for global privacy compliance.The complete, fully-automated consent management platform for global privacy compliance.
Features
Explore powerful tools for automatic cookie blocking, geo-targeting, and reporting.
By Framework
The Louisiana Data Privacy Act (LDPA) gives Louisiana residents new rights over their personal data and creates privacy obligations for businesses that collect, sell, share, or process consumer data. The law was signed on May 29, 2026 and takes effect January 1, 2027.
The Louisiana Data Privacy Act is a comprehensive state privacy law. It follows the broader US state privacy trend and gives consumers rights to access, correct, delete, obtain a copy of, and opt out of certain uses of their personal data.
For websites, the LDPA is especially relevant where cookies, pixels, analytics tools, advertising tags, or tracking technologies are used for targeted advertising, profiling, sensitive data processing, or sale of personal data.
To prepare for LDPA compliance, businesses should:
Data mapping:
Identify what personal data is collected, where it comes from, and which vendors or third parties receive it.
Privacy notice updates:
Provide a clear privacy notice explaining data categories, purposes, consumer rights, appeal rights, data sales, and third-party sharing.
Consent management:
Obtain consent before processing sensitive data and provide clear opt-out options for targeted advertising, sale of personal data, and certain profiling.
Consumer rights handling:
Set up secure methods for Louisiana residents to submit access, correction, deletion, portability, and opt-out requests.
Data protection assessments:
Document assessments for targeted advertising, sale of personal data, sensitive data processing, high-risk profiling, and other high-risk processing activities.
The LDPA applies to businesses that conduct business in Louisiana and meet at least one of these thresholds:
Annual gross revenue above 25 million USD
Processes personal data of 75,000 or more consumers, households, or devices
Derives 50% or more of annual revenue from selling personal data
The law includes exemptions for certain entities and data types, including government bodies, nonprofits, higher education institutions, GLBA-regulated financial institutions, and HIPAA-regulated entities.
Louisiana residents have the right to:
Confirm whether a business is processing their personal data and access that data.
Request correction of inaccurate personal data.
Request deletion of personal data maintained by the controller.
Obtain a copy of their personal data in a portable and usable format.
Opt out of targeted advertising, sale of personal data, and profiling used for significant automated decisions.
Appeal a controller’s refusal to act on a consumer rights request.
Controllers must generally respond to consumer requests within 45 days, with one possible 45-day extension.
Cookies and tracking technologies can collect personal data such as device identifiers, IP addresses, browsing behavior, location signals, and advertising identifiers.
Under the LDPA, businesses using cookies for targeted advertising, sale of personal data, profiling, or sensitive data processing need clear disclosures and effective opt-out or consent controls. The law also recognizes technology-based opt-out signals, including browser or device-level signals, where consumers use them to communicate their choices.
A consent management platform like CookieHub helps businesses manage cookie scanning, categorization, regional consent rules, opt-out signals, consent records, and user preference controls.
The Louisiana Attorney General has enforcement authority. The law does not create a private right of action.
Violations may be treated as unfair or deceptive trade practices. The LDPA includes a temporary 30-day notice and cure period from January 1, 2027 through July 21, 2027.
Businesses can prepare by taking the following steps:
Audit cookies and trackers:
Identify analytics, marketing, personalization, and third-party tracking technologies.
Categorize data use:
Separate necessary, preference, analytics, marketing, targeted advertising, and sensitive data processing.
Update privacy notices:
Explain what data is collected, why it is processed, who it is shared with, and how users can exercise their rights.
Implement consent and opt-out controls:
Use a CMP to provide clear choices, support opt-outs, store consent logs, and allow users to change preferences.
Review vendor contracts:
Make sure processors and third-party vendors support LDPA obligations.
CookieHub helps businesses prepare for the Louisiana Data Privacy Act by automating cookie scanning, consent banner management, regional privacy controls, consent logging, and opt-out handling. This makes it easier to manage LDPA requirements alongside other US privacy laws such as CCPA, TDPSA, CTDPA, CPA, and FDBR.
The Louisiana Data Privacy Act is a state privacy law that gives Louisiana residents rights over their personal data and places obligations on covered businesses.
The LDPA takes effect on January 1, 2027.
The Louisiana Attorney General enforces the law.
It can. Consent is required before processing sensitive data, and businesses must provide opt-out rights for targeted advertising, sale of personal data, and certain profiling.
No. Enforcement is handled by the Louisiana Attorney General.
Disclaimer: The information provided on this page is for general reference purposes only and is not intended to constitute legal or regulatory advice. Data privacy regulations are complex and subject to frequent updates, interpretations, and jurisdictional variations. While efforts are made to keep the material accurate and up to date, we cannot guarantee its completeness or applicability to your specific circumstances. For guidance on compliance or legal obligations, please consult qualified legal professionals or the appropriate regulatory authorities.
Products
©2018-2026 CookieHub ehf.
CookieHub CMP offers tools and services for managing cookies and online privacy.
