LA · Breach notification statute
Louisiana data breach notification law
Summary
- Statute citation
La. R.S. § 51:3074 (Database Security Breach Notification Law) (amended 2018)
- Last amended
- 2018 (as stated in the citation)
- Source
- PRC Data Breach Notification Laws Survey 2026
Who must notify and when
60 days Louisiana requires businesses/persons to notify affected individuals in the most expedient time
Attorney general notice
No Louisiana does not require proactive notification to the Attorney General for breaches; AG notification
What counts as a breach
In Louisiana 'breach of the security of the system' means the compromise of the security, confidentiality, or integrity of computerized data that results in, or there is a reasonable likelihood to result in, the unauthorized acquisition of and access to personal information maintained by an agency or person. Good faith acquisition of personal information by an employee or agent of an agency or person for the purposes of the agency or person is not a breach of the security of the system, provided
What counts as personal information
Not extracted in our PRC 2026 summary; check the statute.
Coverage and remedies
"Not extracted" means the field was not captured in our PRC 2026 summary; check the statute.
HIPAA breaches reported in Louisiana
67 reports to HHS OCR affecting 4,438,165 individuals. Most common type: Hacking/IT Incident. See all HIPAA breaches in Louisiana.
Five largest
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Acadian Ambulance Service, Inc. | Healthcare Provider | 2,896,985 | Aug 20, 2024 | Hacking/IT Incident | Archive (closed) |
| The Baton Rouge Clinic, A Medical Corporation | Healthcare Provider | 308,169 | Sep 2, 2020 | Hacking/IT Incident | Archive (closed) |
| Southwest Louisiana Health Care System, Inc. d/b/a Lake Charles Memorial Health System | Healthcare Provider | 269,752 | Dec 22, 2022 | Hacking/IT Incident | Archive (closed) |
| Imperial Health, LLP | Healthcare Provider | 116,262 | Jul 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Pan-American Life Insurance Group, Inc. | Health Plan | 105,387 | Dec 4, 2023 | Hacking/IT Incident | Archive (closed) |
Frequently asked questions
When must Louisiana businesses notify individuals of a data breach?
Our PRC 2026 extract summarises the Louisiana timing rule as: "60 days Louisiana requires businesses/persons to notify affected individuals in the most expedient time". (Source: PRC 2026 survey extract.)
Does Louisiana require notice to the attorney general?
The PRC 2026 extract notes: "No Louisiana does not require proactive notification to the Attorney General for breaches; AG notification". (Source: PRC 2026 survey extract.)
Does the Louisiana law cover biometric data?
Yes. The PRC 2026 survey records biometric data as covered by the Louisiana breach law.
Does the Louisiana law cover medical information?
No. The PRC 2026 survey does not record medical information as covered by the Louisiana breach law.
Does the Louisiana law cover paper records?
No. The PRC 2026 survey records the Louisiana law as covering computerised data only, not paper records.
Is there a private right of action in Louisiana?
Yes. The PRC 2026 survey records a private right of action under the Louisiana breach law.
Is credit monitoring required in Louisiana?
No. The PRC 2026 survey does not record a credit monitoring requirement in Louisiana.
How does the Louisiana law relate to HIPAA?
HIPAA covered entities and business associates follow the federal HIPAA Breach Notification Rule for protected health information. State breach laws can apply alongside it, and some state statutes treat HIPAA compliance as satisfying state duties. Check the Louisiana statute, and see our HIPAA vs state breach notification laws guide.
Sources
- Privacy Rights Clearinghouse, Data Breach Notification Laws Survey 2026 (laws as of 1 January 2026): privacyrights.org
- The Louisiana state legislature website for the current text of the statute.
- HHS OCR Breach Portal: ocrportal.hhs.gov
- Further reading: NCSL security breach notification laws