Will Oklahoma Be The Next State To Enact A Comprehensive Privacy Bill?

A new privacy bill is gaining steam in the Oklahoma legislature.

On March 4, the Oklahoma Computer Data Privacy Act (HB 1602) passed the state House of Representatives by a vote of 85-11.  If enacted in its current form, the bill would take effect on January 1, 2023, at the same as the California Privacy Rights Act and the Virginia Consumer Data Protection Act.

The bill tracks the California Consumer Privacy Act (CCPA) in many respects. It imposes obligations on "businesses" that meet certain thresholds and applies to data of "consumers" defined to mean residents of the State of Oklahoma.  However, the revenue threshold triggering application of the law would be annual gross revenues excess of  $10 million for Oklahoma businesses, as compared to $25 million under the CCPA.  Like the CCPA, the Oklahoma bill provides consumers with various privacy rights, including the rights of data access and deletion.The bill prohibits discrimination but allows for financial