Oklahoma Passes Comprehensive State Privacy Legislation

On March 20, 2026, Oklahoma’s governor signed S.B. 546 making Oklahoma the latest state to enact a comprehensive state privacy law. The law, effective January 1, 2027, applies to organizations doing business in Oklahoma or targeting residents in Oklahoma that either (i) process 100,000 Oklahoma consumers’ personal data or (ii) process 25,000 Oklahoma consumers’ personal data and derive more than half of its revenue from selling personal data. 

The law has similar notice, consumer rights, and vendor management obligations as those set forth in many other analogous state comprehensive privacy laws. For example, under the law, Oklahomans can request to access, correct, delete, and obtain copies of their personal data, as well as opt out of the sale of their personal data and certain targeted advertising practices.