Oklahoma privacy bill heads to governor’s desk for signature
Oklahoma privacy bill heads to governor’s desk for signature
https://www.biometricupdate.com/202603/oklahoma-privacy-bill-heads-to-governors-desk-for-signature
Publish Date: 2026-03-19 09:10:00
Source Domain: www.biometricupdate.com
Oklahoma is on the verge of joining the growing list of states with a comprehensive consumer data privacy law after the legislature this week sent Senate Bill 546 to Gov. Kevin Stitt for his signature.
The measure, authored by Sen. Brent Howard and carried in the House by Rep. Josh West, cleared the Senate in 2025, passed the House on a floor substitute by an 84 to 4 vote on February 19, and then won final Senate approval of the House amendments by a 38 to 7 vote on Monday.
If Stitt signs the bill, Oklahoma would establish a broad statewide framework governing how large businesses collect, use and sell residents’ personal data.
The bill applies to companies that do business in Oklahoma or target products or services to Oklahoma residents and that either control or process the personal data of at least 100,000 consumers in a calendar year, or control or process the data of at least 25,000 consumers while deriving more than 50 percent of gross revenue from the sale of personal data.
The version that cleared the legislature sets an effective date of July 1.
The proposal follows the now familiar model used in a growing number of state privacy laws. It gives consumers the right to confirm whether a company is processing their personal data, access that data, correct inaccuracies, delete data provided by or obtained about them, and obtain a portable copy of certain personal data.
It also gives consumers the right to opt-out of targeted advertising, the sale of personal data, and certain profiling decisions that produce legal or similarly significant effects.
Companies must respond to consumer requests within 45 days, with a possible 45-day extension when reasonably necessary.
The bill is especially relevant to biometric and other sensitive categories of data because it requires consent before a company may process sensitive data. Its definitions expressly include biometric data generated from measurements of biological characteristics used to…
