Oklahoma
Oklahoma is actively considering comprehensive data privacy legislation, with one bill currently progressing through the legislature while another recently failed to advance. The state is also updating its data breach notification requirements, reflecting growing recognition of privacy protection needs for residents.
Privacy Law Status
Comprehensive Privacy Law
Oklahoma does not currently have a comprehensive consumer data privacy law in effect. However, Senate Bill 546 is actively moving through the legislative process and has passed the Senate with a “do pass” recommendation from the House Government and Modernization Committee[1][2]. This bill would establish fundamental privacy rights for Oklahoma residents and requirements for businesses handling personal data.
A separate bill, House Bill 1012 (Computer Data Privacy Act), was introduced in February 2025 but failed to advance before the legislative crossover deadline in March 2025[2]. This represents the latest in a series of attempts by lawmakers, particularly Representative Josh West, to establish privacy protections in Oklahoma over the past several years[3].
Legislative Activity
Current legislative activity centers on Senate Bill 546, which has received bipartisan support and unanimous passage in the Oklahoma Senate[1]. The bill establishes consumer privacy rights including data access, correction, deletion, and opt-out provisions for data sales and targeted advertising[1][2]. The House has until May 30, 2025, to pass the legislation[2].
Consumer advocacy groups, including Consumer Reports and the Electronic Privacy Information Center, have expressed concerns that SB 546 needs strengthening amendments to provide meaningful protection, particularly regarding data minimization requirements and universal opt-out mechanisms[4]. These organizations argue the current version is too industry-friendly and lacks adequate consumer protections.
Implementation Timeline
If Senate Bill 546 becomes law, it would take effect on January 1, 2026[5][2]. This timeline aligns with Oklahoma’s updated data breach notification law (Senate Bill 626), which also becomes effective January 1, 2026, creating a coordinated approach to privacy and security regulations[6].
The proposed law would apply to businesses with annual revenues of at least $25 million that either control or process personal data of 100,000 or more consumers, or derive over 50% of gross revenue from data sales while processing data of 25,000 or more consumers[2]. This threshold structure mirrors approaches taken by other states with comprehensive privacy laws.
Your Rights as a Oklahoma Resident
Under the proposed Senate Bill 546, Oklahoma residents would gain several important privacy rights, though these are not yet in effect pending final legislative approval.
- Right to know what data is collected: You would have the right to request disclosure of what personal information businesses have collected about you and how they use it[1][2]
- Right to delete personal information: You could request that businesses delete your personal data, including information shared with third parties[7][2]
- Right to opt out of data sales: Businesses would be required to provide clear mechanisms for you to opt out of having your personal information sold to third parties[1][2]
- Right to correct inaccurate data: You would be able to request correction of incorrect personal information held by businesses[1][2]
- Right to non-discrimination: Businesses could not deny service or alter prices based on your exercise of privacy rights, though they could offer incentives for data sharing[7][2]
These rights would be enforced exclusively by the Oklahoma Attorney General, with no private right of action for individual consumers. Businesses would have 45 days to respond to consumer requests and could limit such requests to twice per 12-month period[7].
Business Requirements
The proposed legislation would create specific obligations for covered businesses operating in Oklahoma.
- Which companies must comply: Businesses with annual revenues of at least $25 million that process large amounts of consumer data or derive significant revenue from data sales[2]
- Notice and transparency requirements: Companies must provide clear privacy policies in plain language explaining data collection, use, sharing practices, and consumer rights[7][2]
- Consumer request response procedures: Businesses must establish processes to handle access, deletion, and correction requests within 45 days, with possible extensions[7]
- Security and breach notification rules: Enhanced data breach notification requirements take effect January 1, 2026, including mandatory Attorney General notification for breaches affecting 500 or more residents[6]
Practical Impact
- How these laws protect residents in daily life: The proposed law would give you control over personal information collected by major tech companies, online retailers, and data brokers, allowing you to see what they know about you and limit how they use that information[3][7]
- What to do if rights are violated: Violations would be handled by the Oklahoma Attorney General’s office, which could impose penalties up to $7,500 per intentional violation or $2,500 per unintentional violation[7][2]
- Limitations and gaps in protection: The proposed law applies only to larger businesses, provides no private right of action for consumers, and has been criticized by privacy advocates as lacking strong data minimization requirements[4][2]
Comparison Context
- How Oklahoma compares to leading privacy states: Oklahoma’s proposed law would be less comprehensive than California’s CCPA/CPRA or Virginia’s VCDPA, with higher business thresholds and weaker enforcement mechanisms than some state privacy laws[4]
- What residents might be missing compared to other states: Unlike some state laws, the Oklahoma proposal lacks strong data minimization requirements, universal opt-out mechanisms, and private rights of action that exist in more robust privacy frameworks[4]
Action Steps for Residents
- Immediate steps to protect privacy: While waiting for potential legislation, review privacy settings on social media platforms, use privacy-focused browsers, and be selective about sharing personal information online
- How to exercise legal rights: Currently, Oklahoma residents have limited privacy rights beyond federal protections; if SB 546 becomes law, rights would be exercised directly with businesses and enforced by the Attorney General
- Resources for staying informed: Monitor the Oklahoma Legislature website for updates on SB 546 and contact your representatives to express views on privacy legislation priorities
Official Resources and Contact Information
Oklahoma Legislature
The Oklahoma Legislature manages all privacy-related bills and provides information about legislative progress. Citizens can track bill status, contact representatives, and provide input on pending legislation.
Website: www.oklegislature.gov
Phone: (405) 521-2711
Address: 2300 N Lincoln Blvd., State Capitol Building, Oklahoma City, OK 73105
Finding Your Representatives
Use the Legislature’s “Find My Legislator” tool to identify your specific state representatives and senators based on your address.
Find Your Legislator: Oklahoma Legislature Find My Legislator (available on main legislative website)
Oklahoma House of Representatives
Contact the House directly about privacy legislation or to reach specific representatives.
Phone: (405) 521-2711
Toll Free: (800) 522-8502
Hours: Monday to Friday, 8:30am – 4:30pm
Contact Form: Oklahoma House Contact Form
Attorney General’s Office
The Attorney General’s office handles consumer protection matters and would enforce privacy laws if enacted. They also recently launched an open records complaint form for transparency issues.
Consumer Protection: File consumer complaints through the Attorney General’s Public Protection Unit
Open Records Complaints: New complaint form available for denied public records requests[8][9]
Consumer Protection Resources
The Attorney General’s office provides consumer protection services and can investigate businesses engaged in unfair or deceptive practices affecting Oklahoma consumers.
Consumer Complaint Process: Contact the business directly first, then file a complaint with the Attorney General if unresolved[10]
Important Note: The Attorney General cannot act as your private attorney or file suits solely to recover individual damages, but can investigate patterns affecting the public interest[10]
Staying Informed
Citizens can receive updates about legislative activity through the Oklahoma Legislature’s bill tracking system and email notifications for specific legislation like Senate Bill 546.
Bill Tracking: Create an account on the Legislature website to track specific bills and receive email updates
Committee Information: House Government Modernization and Technology Committee and Senate Commerce and Economic Development Oversight Committee handle privacy legislation
Sources and Citations
Last Updated August 2025. Written with contributions from both human authors and Perplexity AI. If you find incorrect or outdated information let us know at support@optery.com.