Louisiana AI laws in 2026

Louisiana businesses do not need to wait for a single, all-purpose AI law before putting guardrails in place. Existing consumer-protection and data-security rules already matter, targeted AI laws address specific harms, and a newly enacted Louisiana privacy law creates a separate preparation deadline for covered businesses in 2027.

For owners in Lafayette, Baton Rouge and across Louisiana, the practical question is not simply whether employees can use AI. It is what information they may share, who checks important decisions, and how the business can explain what it did.

Reviewed November 7, 2026. This is an educational overview of selected laws and governance practices, not legal advice or an exhaustive statement of every applicable requirement. Ask qualified counsel to confirm coverage, effective dates and obligations for your business.

What applies now, what is coming, and what is only a proposal?

• Existing Louisiana consumer protection: Louisiana Revised Statute 51:1405 prohibits unfair or deceptive trade practices. Using an AI tool does not make misleading business conduct acceptable.
• Targeted AI restrictions: Louisiana's 2026 Act 782 strengthens criminal provisions addressing specified unlawful deepfake and AI-generated sexual imagery conduct. These are targeted prohibitions, not a general business AI certification scheme.
• A 2027 preparation deadline: Louisiana's Data Privacy Act, enacted as Act 502 of 2026, becomes effective January 1, 2027. Its coverage thresholds and exemptions matter; it does not automatically cover every small business.
• Introduced bills are not proof of current law: the original 2026 HB 230 text proposes disclosure requirements for AI-generated multimedia. Do not treat an introduced bill or a bill-summary website as proof that a universal labeling requirement is in force.
• Voluntary governance guidance: the NIST AI Risk Management Framework is voluntary guidance, not a Louisiana statute and not a compliance certificate.

1. AI-generated marketing still needs to be truthful

Louisiana's R.S. 51:1405 declares unfair methods of competition and unfair or deceptive acts or practices in trade or commerce unlawful. At the federal level, Section 5 of the Federal Trade Commission Act, 15 U.S.C. 45, prohibits unfair or deceptive acts or practices within its scope.

For a business using AI to write website copy, proposals or advertisements, that means a human should check factual claims before publication. Do not let a generated draft invent customer results, professional credentials, product capabilities or guarantees. Keep support for important claims. This is a practical control for existing legal risk, not a claim that every AI-assisted sentence requires the same disclosure.

2. Louisiana has specific laws addressing harmful synthetic imagery

Act 782 of the 2026 Regular Session amends Louisiana's computer-related crime laws, including R.S. 14:73.13 and 14:73.14, and adds provisions concerning specified AI-generated imagery offenses. Among its provisions, it addresses knowingly creating or possessing sexual deepfakes depicting minors and other prohibited conduct involving AI-generated images.

For workplace governance, prohibit abusive synthetic imagery and unauthorized impersonation in company systems. Establish a reporting and escalation path. If an incident occurs, involve legal counsel and the appropriate authorities rather than treating it as an ordinary acceptable-use violation. The precise elements of each offense matter; this summary is not a substitute for the statutory text.

3. Prepare for Louisiana's Data Privacy Act without confusing its effective date

The Louisiana Legislature lists SB 386 as signed by the governor, Act 502, effective January 1, 2027. The enrolled text creates the Louisiana Data Privacy Act and sets out applicability, exemptions, consumer rights, controller and processor duties, and data-protection assessment requirements for specified processing.

This is an enacted law with a future effective date, not a claim that all its duties already apply in November 2026. Coverage is not automatic: the text includes business thresholds involving revenue, quantities of personal information and revenue from selling personal information, along with exemptions. Have counsel evaluate the actual definitions and your operations.

If your business is covered, preparation should include mapping personal data, reviewing notices and vendor contracts, and identifying AI workflows that use personal information or profiling. A vendor's promise that its tool is secure is not the same as your own documented assessment of how your business uses it.

4. Health and financial information require separate attention

AI does not replace sector-specific responsibilities. The HIPAA Security Rule applies to regulated entities and the electronic protected health information within its scope. Before connecting patient information to an AI service, review permitted use, access, safeguards and whether an appropriate business associate agreement is required and available. A business subscription alone is not proof that the workflow is suitable.

For institutions covered by the FTC Safeguards Rule, 16 CFR 314.4 addresses information-security programs, risk assessment, access, encryption, authentication and service-provider oversight, among other duties. Consider AI vendors and integrations within that review when they handle covered customer information. Coverage and limited exemptions must be evaluated rather than assumed.

5. Separate proposed AI rules from enforceable obligations

AI legislation changes quickly. For example, the original text of 2026 HB 230 proposes AI-generated multimedia disclosure and penalties. That document is labeled ORIGINAL and describes proposed law; by itself, it does not establish enactment or an effective date.

Before changing operations based on a bill, confirm its final status, any signed act, the enacted wording and the effective date through official legislative records. Do the same for rules in other states if you serve their residents. Political communications, regulated decisions and specialized products can require a more focused legal review than routine internal drafting.

AI governance checklist for Lafayette businesses

A practical governance program connects legal review to everyday settings and staff behavior:

1. Inventory AI use. List tools, connected systems, owners and business purposes, including unapproved tools employees already use.
2. Classify the data. Decide which information may enter each approved tool. Keep confidential or regulated information out of unapproved services.
3. Review vendors. Check retention, model-training terms, deletion, subprocessors, security controls and contractual protections.
4. Require human review. Assign a responsible person to verify important outputs and escalate hiring, lending, health, legal and other high-impact uses for specialist review.
5. Write the rules. Set acceptable uses, restrictions, approval steps and incident reporting. Start with our business AI policy template and adapt it to your obligations.
6. Keep evidence. Record approvals, training, risk decisions and material changes. Revisit controls when the tool, data or use case changes.

The NIST AI Risk Management Framework offers a voluntary foundation for organizing that work. Using it can structure conversations and documentation; it does not certify legal compliance.

Turn AI governance into a working business process

Vital Integrators helps Louisiana organizations connect AI policies to approved tools, access controls, staff training and practical oversight. Explore AI compliance and governance support in Lafayette, AI consulting in Lafayette, and AI governance for Baton Rouge businesses.

For help reviewing security and AI risks, start an assessment at Vital Secured. Implementation support is not legal advice and does not guarantee regulatory compliance.