Privacy Map

Oklahoma. Comprehensive data protection. Act

Oklahoma privacy lawOklahoma consumer data privacy act (SB 546, 2026)

Enacted – not yet in force

§1Summary

Synopsis

Virginia-model comprehensive law, the 20th state law of its type, with standard rights and opt-outs enforced solely by the AG.

Key themes
  • consumer rights (access, deletion, correction, portability)
  • opt-out of sale, targeted advertising and profiling
  • sensitive data consent
  • data protection assessments
  • processor contracts
Unique features

'Sale' limited to monetary consideration; permanent 30-day cure period.

SaaS relevance

Applies at 100,000 Oklahoma consumers, or 25,000 with over 50% revenue from sales.

§2Obligations

Extraterritorial
Yes
Breach notification
See 24 O.S. § 161 et seq. (separate statute)
DPO
No
Cross-border transfers
None
Maximum penalty
Up to $7,500 per violation

§3Dates

Key dates
  • Adopted
  • In force

§4Text and authority

Text
Authority
Oklahoma Attorney General

§5Where it applies

Domestic law of
Oklahoma

§6Sources and verification

Verification

High confidence.

Official short title not confirmed.