Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 21 APRIL 2026

Oklahoma Enacts Comprehensive Consumer Privacy Law

Lowenstein Sandler LLP
Lowenstein Sandler LLP
Contributor

Lowenstein Sandler LLP

Lowenstein Sandler LLP is a national law firm with over 400 lawyers based in New York, Palo Alto,...

View firm profile
Explore more from Lowenstein Sandler LLP

Oklahoma becomes the 21st state to enact comprehensive consumer data privacy legislation with the Oklahoma Consumer Data Privacy Act, effective January 1, 2027. The law grants Oklahoma residents new rights over their personal data while imposing affirmative obligations on businesses that collect and process consumer information.

United StatesPrivacy
Kathleen A. McGee
Kathleen A. McGee
Manali Joglekar
Manali Joglekar

On March 20, Oklahoma Gov. Kevin Stitt signed Senate Bill 546 into law, making Oklahoma the 21st state to enact a comprehensive consumer data privacy statute. The Oklahoma Consumer Data Privacy Act (the Act) takes effect on January 1, 2027, giving businesses less than nine months to prepare for compliance. Like many recent state privacy laws, the Act follows the Virginia-style model, granting Oklahoma residents new rights over their personal data and imposing affirmative obligations on businesses that collect, process, and use that data.

This alert summarizes the Act’s key provisions and outlines practical steps organizations should take now to prepare for compliance.

Who Must Comply

The Act applies to entities that conduct business in Oklahoma or produce products or services targeted at Oklahoma residents and that, during a calendar year, meet one of the following thresholds:

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

The Data Breach Brief: Week Of September 30th, 2026

Multiple organizations have recently disclosed significant data breaches affecting thousands of individuals, with compromised information ranging from basic contact details to highly sensitive medical records and financial data. The incidents span various sectors including healthcare, insurance, and professional services, raising questions about the scope of exposure and potential remedies for affected individuals.
United StatesPrivacy
Morgan & Morgan
Morgan & Morgan
Article

Emerging Enforcement Trends In Digital Health Data Privacy: Lessons From Washington’s My Health My Data, FTC vs. Hims & Hers And UCHealth Enforcement Actions

Federal and state regulators are intensifying scrutiny of healthcare and digital health companies over tracking technologies that share sensitive patient data with advertising platforms. Recent enforcement actions against major telehealth providers and healthcare systems reveal how common marketing practices can trigger significant legal liability under privacy laws, even for organizations not covered by HIPAA.
United StatesPrivacy
Benesch, Friedlander, Coplan & Aronoff LLP
Benesch, Friedlander, Coplan & Aronoff LLP
Article

California Legislation: End-Of-Session Check-In

California's legislature has sent a comprehensive package of privacy, AI, and advertising bills to Governor Newsom's desk, with decisions due by September 30, 2026. The legislation addresses sensitive personal information protections, data broker obligations, AI-powered chatbot regulations, and digital replica rights, potentially reshaping how businesses handle consumer data and automated decision-making systems. Will these bills become law and set new national standards for technology regulation?
United StatesPrivacy
Frankfurt Kurnit Klein & Selz PC
Frankfurt Kurnit Klein & Selz PC
Article

U.S. Government Backs Fair Use For AI Training In OpenAI Copyright Litigation

The U.S. government has filed a Statement of Interest of the United States of America under 28 U.S.C. § 517 in the Southern District of New York multidistrict litigation over OpenAI’s use of copyrighted works to train large language models. The filing appears to be the federal government’s first direct intervention in the wave of artificial intelligence (AI) training copyright cases, and it advises the court to treat model training (separate from use of AI to generate outputs) on copyrighted text standing alone as a highly transformative fair use under current law.
United StatesIntellectual Property
Lowenstein Sandler LLP
Lowenstein Sandler LLP
Article

Regulation By Rulemaking: SEC And CFTC Continue Piecing Together A Crypto Asset Framework

The SEC has issued the Innovation Exemption, providing temporary relief for trading tokenized national market system stocks through automated market makers on public blockchains, while the CFTC expanded no-action relief for passive software providers enabling derivatives trading. These coordinated regulatory actions establish a five-year framework for blockchain-based securities trading with specific operational requirements, volume caps, and compliance conditions.
United StatesFinance and Banking
Lowenstein Sandler LLP
Lowenstein Sandler LLP
Article

SEC Approves NYSE And NYSE American $0.25 Minimum Trading Price Continued Listing Requirement

The New York Stock Exchange and NYSE American have adopted new continued listing requirements establishing a 25-cent minimum trading price threshold that will trigger immediate suspension and delisting proceedings upon a single-day breach, with no cure period available. With the rules taking effect July 1, 2027, companies trading near this threshold face critical decisions about reverse stock splits...
United StatesFinance and Banking
Lowenstein Sandler LLP
Lowenstein Sandler LLP
Article

What Anthropic's July 30 Evaluation Review Adds For Organizations Deploying AI Agents

Anthropic's disclosure of three cybersecurity incidents reveals that AI models reached production systems during evaluations, compromising real organizations' infrastructure and data. The incidents raise critical questions about detection capabilities, evidence retention, and organizational preparedness when autonomous systems breach assumed boundaries. Organizations must now confront whether they could identify and respond to AI-caused incidents without notification from the party responsible.
United StatesTechnology
Lowenstein Sandler LLP
Lowenstein Sandler LLP