{
 "jurisdiction_id": "LA",
 "jurisdiction": "Laos",
 "url": "https://dataprotection.gi/jurisdictions/laos/",
 "generator": "render_jid v13-gdpri-1.0.0",
 "date_modified": "2026-08-05",
 "schema_version": "gdpri-v2",
 "counts": {
  "categories": 10,
  "claims": 25,
  "sub_modules": 57,
  "source_register": 9
 },
 "categories": [
  {
   "code": "regulator_and_framework",
   "name": "Regulator & Framework",
   "traffic_light": "amber",
   "sub_modules": [
    "act_and_instruments",
    "material_scope",
    "regulator_and_authority",
    "regulator_registration_and_filing",
    "territorial_scope"
   ],
   "url": "https://dataprotection.gi/jurisdictions/laos/#regulator-and-framework-regulator-framework",
   "traffic_light_rationale": "Comprehensive omnibus statute exists but is not yet effective (1 Jan 2027); regulator capacity/registration regime unconfirmed.",
   "claims": [
    {
     "statement": "Enforcement of the Louisiana Data Privacy Act is granted exclusively to the Louisiana Attorney General, with violations classified as unfair or deceptive trade practices.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-president-senate-and",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "The Louisiana Attorney General is responsible for enforcing the state's breach-notification requirements under La. R.S. 51:3071 et seq. and Title 16 of the Louisiana Administrative Code.",
     "regulatory_stage": "in_force",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/notes/louisiana-data-breach",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "Senate Bill 386, signed on 29 May 2026, establishes the Louisiana Data Privacy Act, a comprehensive consumer data-privacy framework regulating collection, use and sale of personal data, effective 1 January 2027.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-governor",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "The LDPA bill creates a new Chapter 20-B of Title 51 of the Louisiana Revised Statutes.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-president-senate-and",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "The LDPA applies to businesses earning more than USD 25 million in revenue and those processing the personal data of more than 75,000 people, or deriving more than 50% of revenue from the sale of personal data.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "International Association of Privacy Professionals",
     "source_url": "https://prod.iapp.org/news/a/louisiana-legislature-close-to-passing-comprehensive-privacy-law/",
     "source_tier": null,
     "observed_at": "2026-08-05"
    }
   ]
  },
  {
   "code": "lawful_processing_and_special_data",
   "name": "Lawful Processing & Special Data",
   "traffic_light": "amber",
   "sub_modules": [
    "consent_thresholds",
    "lawful_bases",
    "pseudonymisation_and_anonymisation",
    "special_categories"
   ],
   "url": "https://dataprotection.gi/jurisdictions/laos/#lawful-processing-and-special-data-lawful-processing-special-data",
   "traffic_light_rationale": "Consent thresholds for sensitive data are documented; a GDPR-style enumerated lawful-bases regime and pseudonymisation/anonymisation safe-harbour provisions were not located in available sources.",
   "claims": [
    {
     "statement": "The LDPA establishes controller and processor obligations including data minimization and purpose limitation as general processing constraints, rather than an enumerated lawful-bases list.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Probable",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-governor",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "The LDPA requires consumer consent for processing sensitive data, including health, biometric, genetic, and children's data.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-president-senate-and",
     "source_tier": null,
     "observed_at": "2026-08-05"
    }
   ]
  },
  {
   "code": "data_subject_rights",
   "name": "Data Subject Rights",
   "traffic_light": "amber",
   "sub_modules": [
    "access_right",
    "data_portability",
    "deadlines_and_response_windows",
    "rectification_and_erasure",
    "restriction_and_objection"
   ],
   "url": "https://dataprotection.gi/jurisdictions/laos/#data-subject-rights-data-subject-rights",
   "traffic_light_rationale": "Core rights confirmed; deadline specifics unconfirmed pending primary statutory text review.",
   "claims": [
    {
     "statement": "Individuals can access, correct, delete, and obtain a portable copy of their personal data under the Louisiana Data Privacy Act.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-president-senate-and",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "Individuals can opt out of targeted advertising and data sales under the Louisiana Data Privacy Act.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-president-senate-and",
     "source_tier": null,
     "observed_at": "2026-08-05"
    }
   ]
  },
  {
   "code": "controller_processor_duties",
   "name": "Controller/Processor Duties",
   "traffic_light": "amber",
   "sub_modules": [
    "accountability_and_dpia",
    "breach_notification",
    "dpo_requirements",
    "joint_controller_arrangements",
    "retention_and_disposal",
    "ropa_requirements",
    "security_measures"
   ],
   "url": "https://dataprotection.gi/jurisdictions/laos/#controller-processor-duties-controller-processor-duties",
   "traffic_light_rationale": "Security and breach-notification duties well evidenced; DPIA trigger language is probable but truncated in sources; DPO/ROPA/retention specifics unconfirmed.",
   "claims": [
    {
     "statement": "Higher-risk processing activities such as targeted advertising, the sale of personal data, and profiling with foreseeable consumer harm are subject to heightened obligations under the Louisiana Data Privacy Act.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Probable",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-president-senate-and",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "The Louisiana Data Privacy Act includes controller and processor obligations covering data minimization, purpose limitation, security safeguards, and clear privacy notices.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-president-senate-and",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "Business obligations under the Louisiana Data Privacy Act require data minimization, purpose limitation, and reasonable security safeguards.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-governor",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "Louisiana requires breach notification pursuant to La. R.S. 51:3071 et seq. and Title 16, Chapter 7 of the Louisiana Administrative Code.",
     "regulatory_stage": "in_force",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/notes/louisiana-data-breach",
     "source_tier": null,
     "observed_at": "2026-08-05"
    }
   ]
  },
  {
   "code": "cross_border_and_adequacy",
   "name": "Cross-Border & Adequacy",
   "traffic_light": "red",
   "sub_modules": [
    "adequacy_granted",
    "adequacy_received",
    "data_localisation",
    "sccs_and_bcrs",
    "transfer_impact_assessment",
    "transfer_mechanisms"
   ],
   "url": "https://dataprotection.gi/jurisdictions/laos/#cross-border-and-adequacy-cross-border-adequacy",
   "traffic_light_rationale": "No comprehensive cross-border transfer regime exists in Louisiana or at US federal level for general commercial data.",
   "claims": []
  },
  {
   "code": "sectoral_watch",
   "name": "Sectoral Watch",
   "traffic_light": "amber",
   "sub_modules": [
    "credit_and_scoring",
    "education",
    "employment_data",
    "financial_sector_overlay",
    "health_sector_overlay",
    "insurance",
    "telecoms_and_eprivacy"
   ],
   "url": "https://dataprotection.gi/jurisdictions/laos/#sectoral-watch-sectoral-watch",
   "traffic_light_rationale": "Education and insurance overlays evidenced; other sectoral overlays unconfirmed at state level.",
   "claims": [
    {
     "statement": "Louisiana previously enacted a student data privacy law which prohibits districts from sharing PII with any entity, including the state, without parental consent.",
     "regulatory_stage": "in_force",
     "is_binding": true,
     "confidence": "Probable",
     "source_publisher": "International Association of Privacy Professionals",
     "source_url": "https://iapp.org/news/a/student-privacy-leglisative-update",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "Louisiana Revised Statutes Title 22 contains an insurance data security provision (referenced at La. R.S. §22:2504), though its full substantive scope could not be confirmed from available secondary sources.",
     "regulatory_stage": null,
     "is_binding": false,
     "confidence": "Uncertain",
     "source_publisher": "State of Louisiana / DataGuidance legal research repository",
     "source_url": "https://www.dataguidance.com/legal-research/%C2%A7222504-louisiana-revised-statutes",
     "source_tier": null,
     "observed_at": "2026-08-05"
    }
   ]
  },
  {
   "code": "adtech_and_commercial_privacy",
   "name": "AdTech & Commercial Privacy",
   "traffic_light": "amber",
   "sub_modules": [
    "clean_rooms_and_dcr",
    "cookies_and_trackers",
    "cross_context_advertising",
    "dark_patterns",
    "direct_marketing",
    "opt_out_signals"
   ],
   "url": "https://dataprotection.gi/jurisdictions/laos/#adtech-and-commercial-privacy-adtech-commercial-privacy",
   "traffic_light_rationale": "Opt-out and cross-context advertising provisions confirmed; dark-patterns, cookies, clean-rooms, and direct-marketing specifics unconfirmed.",
   "claims": [
    {
     "statement": "Sensitive data limitations, universal opt-out mechanisms, and a sunsetting right to cure are included in the Louisiana Data Privacy Act.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "International Association of Privacy Professionals",
     "source_url": "https://prod.iapp.org/news/a/louisiana-legislature-close-to-passing-comprehensive-privacy-law/",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "Consumers can opt out of targeted advertising and data sales under the Louisiana Data Privacy Act.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-president-senate-and",
     "source_tier": null,
     "observed_at": "2026-08-05"
    }
   ]
  },
  {
   "code": "algorithmic_biometric_and_surveillance_governance",
   "name": "Algorithmic, Biometric & Surveillance Governance",
   "traffic_light": "amber",
   "sub_modules": [
    "ai_risk_assessments",
    "automated_decision_making_transparency",
    "biometric_regime",
    "genetic_data",
    "profiling_restrictions",
    "state_surveillance_carveouts"
   ],
   "url": "https://dataprotection.gi/jurisdictions/laos/#algorithmic-biometric-and-surveillance-governance-algorithmic-biometric-surveill",
   "traffic_light_rationale": "Profiling and biometric/genetic consent confirmed; ADM transparency and AI-risk-assessment specifics unconfirmed.",
   "claims": [
    {
     "statement": "Higher-risk processing activities under the Louisiana Data Privacy Act include profiling with foreseeable consumer harm.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Probable",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-president-senate-and",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "The Louisiana Data Privacy Act requires consumer consent for processing sensitive data including biometric and genetic data.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-president-senate-and",
     "source_tier": null,
     "observed_at": "2026-08-05"
    }
   ]
  },
  {
   "code": "children_and_vulnerable_groups",
   "name": "Children & Vulnerable Groups",
   "traffic_light": "amber",
   "sub_modules": [
    "age_verification",
    "dependent_adults",
    "education_settings",
    "minor_profiling_bans",
    "parental_consent"
   ],
   "url": "https://dataprotection.gi/jurisdictions/laos/#children-and-vulnerable-groups-children-vulnerable-groups",
   "traffic_light_rationale": "Multiple children's-data instruments confirmed at headline level; granular content of the 2025 Anti-Grooming Act and profiling bans specific to minors not independently confirmed.",
   "claims": [
    {
     "statement": "Louisiana enacted a Kids Online Protection and Anti-Grooming Act in 2025 addressing online child interaction and age limitation.",
     "regulatory_stage": "in_force",
     "is_binding": true,
     "confidence": "Uncertain",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-kids-online-protection-and-anti-grooming-act",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "The Louisiana Data Privacy Act requires consent for processing children's data and aligns parental consent requirements with federal standards.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-governor",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "A 2023 enrolled Louisiana House bill addressing minors' consent became effective on 1 August 2024, with the Louisiana State Law Institute directed to take implementing actions.",
     "regulatory_stage": "in_force",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "Louisiana Legislature",
     "source_url": "https://www.dataguidance.com/sites/default/files/document_1330760.pdf",
     "source_tier": null,
     "observed_at": "2026-08-05"
    }
   ]
  },
  {
   "code": "enforcement_and_redress",
   "name": "Enforcement & Redress",
   "traffic_light": "amber",
   "sub_modules": [
    "collective_redress_and_class_actions",
    "enforcement_activity_index",
    "private_right_of_action",
    "recent_developments_180d",
    "regulator_funding_and_capacity",
    "regulator_powers_and_penalties"
   ],
   "url": "https://dataprotection.gi/jurisdictions/laos/#enforcement-and-redress-enforcement-redress",
   "traffic_light_rationale": "Enforcement powers and cure period confirmed; no enforcement track record exists yet as the law is not yet effective; PRA/class-action mechanisms unconfirmed.",
   "claims": [
    {
     "statement": "Enforcement of the Louisiana Data Privacy Act is handled exclusively by the Attorney General, with a 30-day cure period for violations.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-governor",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "Violations of the Louisiana Data Privacy Act are classified as unfair or deceptive trade practices.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-president-senate-and",
     "source_tier": null,
     "observed_at": "2026-08-05"
    },
    {
     "statement": "The Governor of Louisiana signed Senate Bill 386, establishing the Louisiana Data Privacy Act, on 29 May 2026.",
     "regulatory_stage": "enacted_not_yet_effective",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "DataGuidance",
     "source_url": "https://www.dataguidance.com/news/louisiana-data-privacy-act-signed-governor",
     "source_tier": null,
     "observed_at": "2026-08-05"
    }
   ]
  }
 ]
}