Louisiana

Law: RS 51:3074

The section that holds the state's general breach notification duty for businesses, as the source names it.

rs 51:3074

Source: https://legis.la.gov/legis/Law.aspx?d=322030. Read 2026-11-01. Read once.

Days to tell residents: 60 days

The outer limit in days for telling affected residents, as stated. Blank where no number is stated. States start the clock differently, at discovery or at determining a breach happened, and the quote shows which.

not later than sixty days from the discovery of the breach

Source: https://legis.la.gov/legis/Law.aspx?d=322030. Read 2026-11-01. Checked by a second reader.

How fast, in the law's words: in the most expedient time possible and without unreasonable delay

The law's own words for how quickly residents must be told, apart from any day count.

shall be made in the most expedient time possible and without unreasonable delay

Source: https://legis.la.gov/legis/Law.aspx?d=322030. Read 2026-11-01. Checked by a second reader.

Attorney general told: Yes

Yes if the source says the state attorney general or its equivalent must be told of a breach in at least some cases. Florida's Department of Legal Affairs and Oregon's Attorney General count.

the person or agency shall provide written notice detailing the breach of the security of the system to the consumer protection section of the attorney general's office

Source: https://www.ag.state.la.us/Page/DataBreach. Read 2026-11-01. Checked by a second reader.

Residents before the AG is told: Not stated

The number of affected residents at which the attorney general must be told, as stated. Blank where no number is stated. The quote shows whether it means that many or more than that many.

No source we could use stated this. A blank never means no.

Days to tell the AG: 10 days

The deadline in days for telling the attorney general, as stated. Blank where no number is stated. Clocks differ: some run from the breach, and others from telling residents, as the quote shows.

notice to the attorney general shall be timely if received within 10 days of distribution of notice to louisiana citizens

Source: https://www.ag.state.la.us/Page/DataBreach. Read 2026-11-01. Checked by a second reader.

Encrypted data excepted: Yes

Yes if the text limits the duty to unencrypted data, or leaves encrypted data out. Stolen keys can undo this in several states.

when the name or the data element is not encrypted or redacted

Source: https://legis.la.gov/legis/Law.aspx?d=322029. Read 2026-11-01. Checked by a second reader.

Low-harm exception: Yes

Yes if the text lets a business skip notice after finding that harm or misuse is unlikely, or only counts breaches that create a real risk.

shall not be required if after a reasonable investigation, the person or business determines that there is no reasonable likelihood of harm

Source: https://legis.la.gov/legis/Law.aspx?d=322030. Read 2026-11-01. Checked by a second reader.