Louisiana

Obligations

Business Obligations

• AppealsRequiredInternal appeal process for denied rights requests.
• Data securityRequiredMaintain reasonable administrative, technical, and physical safeguards as required by the statute.
• Privacy noticeRequiredProvide required privacy disclosures/notices.
• Sensitive dataState-specificOpt-in consent is generally required before processing sensitive data, subject to statutory exceptions.
• Data minimizationRequired / state-specificLimit or govern collection/use consistent with the statute's duties and disclosed purposes.
• Universal opt outRequires interpretationStatutory language recognizes technology/agent mechanisms, but treatment as a mandatory universal opt-out signal requirement should be reviewed.
• Processor contractsRequiredUse contracts governing processors/service providers as required.
• Consumer request processRequiredProvide methods for consumers to exercise statutory rights.
• Data protection assessmentRequiredConduct assessments for specified higher-risk processing.

The enacted text recognizes authorized agents using browser settings/extensions/global device settings. Whether to label that as a mandatory universal opt-out mechanism requirement should be reviewed before presenting a yes/no public badge.

Exemptions

Common Exemptions

Exemptions are state-specific and may apply at the entity level, data level, or both. Verify the official statute before relying on an exemption. Treatment commonly varies for government, regulated financial/health information, higher education, nonprofits, employment data, and B2B data.

This list is not exhaustive.