Cybersecurity Policy Report, Oklahoma Bill to Protect Children’s Personal Data Advances, (Mar 6, 2025)
The Oklahoma state House Health and Human Services Oversight Committee has passed a bill to require certain organizations that offer online services to complete data protection impact assessments to evaluate how their platforms might affect children.
HB 1388 would direct certain entities to complete a data protection impact assessment for any online product, service, or feature that is “reasonably likely to be accessed and maintain documentation of the data protection impact assessment as long as the online product, service or feature is reasonably likely to be accessed.” Within five business days of a written request by the attorney general, a covered entity would be required to provide to the attorney general a list of all data protection impact assessments that had been completed.
The legislation further would prohibit the processing of children’s personal data in ways that are inconsistent with their best interests, including profiling and the use of dark patterns. The bill would also require high default privacy settings and clear communication of privacy policies in age-appropriate language.
According to the bill, only the state attorney general would be authorized to initiate enforcement. The bill has an effective date of Nov. 1.
The bill (H.B. 1388, Reg Sess.) is sponsored by Rep. Toni Hasenbeck (R.).
News: DataPrivacy StateLegislation