Cybersecurity Policy Report, Oklahoma Senate Passes Data Breach Notification Bill, (Apr 1, 2025)
The Oklahoma state Senate voted 38-6 recently to pass a bill that would require entities experiencing a data breach to notify the state attorney general of the breach within 60 days after providing notice to impacted residents.
The bill, SB 626, would modify the Security Breach Notification Act and require entities to notify the attorney general within 60 days of notifying affected residents of a security breach, with exemptions for breaches affecting fewer than 500 residents or 1,000 residents in the case of credit bureaus.
According to the bill, the notice should include the date of the breach, the date of its determination, the nature of the breach, the type of personal information exposed, the number of state residents affected, the estimated monetary impact of the breach to the extent such impact can be determined, and any reasonable safeguards the entity employs.
The bill (S.B. 626, Reg Sess.) is sponsored by Sen. Brent Howard (R.). It has been transmitted to the House.
News: StateLegislation DataBreach DataSecurity