cThe Oklahoma Consumer Data Privacy Act (OCDPA) will take effect on January 1, 2027. Oklahoma joins a growing roster of states in imposing obligations upon businesses that control or process personal data and in granting consumers certain rights over the personal data they provide. The OCDPA mirrors several states’ data privacy laws, particularly Virginia’s Consumer Data Protection Act (VCDPA). However, the OCDPA contains several distinct provisions that require review by businesses operating in Oklahoma or targeting its residents.
Notably, the OCDPA is generally considered business-friendly compared to many of its counterparts, featuring broad exemptions, a narrow definition of “sale” that is limited to exchanges or personal data for monetary consideration only, and a permanent right-to-cure period.
