When Your Data Is Breached
La. R.S. 51:3074 — a business notifies affected residents within 60 days of discovering a breach
Personal information is a resident's name together with a social security number, a driver's license or state ID number, a financial account or card number with its access code, a passport number, or biometric data, when not encrypted or redacted.
Sixty days. A business or agency that owns computerized personal information notifies every resident whose information was, or is reasonably believed to have been, acquired by an unauthorized person, in the most expedient time possible and not later than 60 days from discovering the breach.
- Notice may be delayed while law enforcement says it would impede an investigation.
- No notice is required if a reasonable investigation finds no reasonable likelihood of harm, and the business keeps that written finding for five years.
- Businesses keep reasonable security, and destroy records with personal information they no longer need.
- A violation is an unfair practice under the consumer protection law.
Sources for this section (2)
- La. R.S. 51:3073 — Definitions
- La. R.S. 51:3074 — Protection of personal information; disclosure upon breach in the security of personal information; notification requirements; exemption
Legal information, not legal advice. Verified as of October 2026. Applying it to a particular situation is the work of a licensed Louisiana attorney.