{"id":254431,"date":"2026-03-27T03:00:00","date_gmt":"2026-03-27T07:00:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/03\/27\/oklahoma-enacts-nations-twentieth-state-comprehensive-privacy-law\/"},"modified":"2026-05-24T19:30:52","modified_gmt":"2026-05-24T23:30:52","slug":"oklahoma-enacts-nations-twentieth-state-comprehensive-privacy-law","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/03\/27\/oklahoma-enacts-nations-twentieth-state-comprehensive-privacy-law\/","title":{"rendered":"Oklahoma Enacts Nation\u2019s Twentieth State Comprehensive Privacy Law"},"content":{"rendered":"

Oklahoma Enacts Nation\u2019s Twentieth State Comprehensive Privacy Law<\/a><\/p>\n

https:\/\/www.wilmerhale.com\/en\/insights\/blogs\/wilmerhale-privacy-and-cybersecurity-law\/20260327-oklahoma-enacts-nations-twentieth-state-comprehensive-privacy-law<\/a><\/p>\n

Publish Date: 2026-03-27 03:00:00<\/a><\/p>\n

Source Domain: www.wilmerhale.com<\/a><\/p>\n

On March 16, the Oklahoma legislature passed SB 546, with Oklahoma Governor Kevin Stitt signing the bill into law on March 20. SB 546 is the twentieth state comprehensive law to be enacted and will take effect on January 1, 2027. Notably, the Oklahoma law comes after a long hiatus for state comprehensive privacy laws, with last year marking the first year since 2020 in which no new state comprehensive privacy was enacted.<\/p>\n

SB 546 generally adheres to the standard model exemplified by most non-California state comprehensive privacy laws but is on the more \u201cbusiness-friendly\u201d side of the spectrum. The law includes entity-wide exemptions for entities covered by the Gramm-Leach-Bliley Act (GLBA), as well as both covered entities and business associates regulated by the Health Insurance Portability and Accountability Act (HIPAA). It also includes exemptions for personal data processed in a \u201ccommercial\u201d or \u201cemployment\u201d context. Additionally, unlike many other comprehensive privacy laws, Oklahoma\u2019s law does not require entities to comply with opt-out preference signals as valid requests to opt-out. Because of these provisions and others, companies that have taken steps to comply with the requirements in other states can likely readily adapt their compliance programs for Oklahoma.<\/p>\n

In this post, we summarize notable provisions of SB 546 and highlight key takeaways for companies looking to understand how this law will affect their privacy compliance obligations. To stay up to date on the latest state privacy law developments, please subscribe to the WilmerHale Privacy and Cybersecurity Law Blog.<\/p>\n

KEY TAKEAWAYS<\/span><\/strong><\/p>\n