Cybersecurity Policy Report, Oklahoma Senate Votes to Advance Consumer Privacy Bill, (Mar 17, 2026)
The Oklahoma state Senate voted 38-7 this week to pass a bill that would adopt comprehensive privacy and data protection requirements.
SB 546 would enable consumers to access, correct, delete, and obtain copies of their personal data, as well as opt out of targeted advertising, data sales, and certain types of profiling. It would impose requirements on controllers, including the provision of a privacy notice and the maintenance of contracts governing relationships with third-party processors.
Under the bill, companies would have to provide clear privacy notices, honor consumer requests, and avoid discriminatory practices against consumers exercising these rights. The measure also would require companies to conduct data protection assessments for high-risk data processing and establish contracts with third parties handling personal information.
The measure would apply to businesses operating in the state and handling data for at least 100,000 consumers or at least 25,000 consumers while earning over half of their revenue from selling personal data.
SB 546 doesn’t contemplate a private right of action, granting exclusive enforcement authority to the state attorney general. It would allow for a 30-day cure period for violations and would authorize a fine of up to $7,500 for violations.
Recent amendments to the bill modify the definition of biometric data and add an emergency clause to the measure.
The bill (S.B. 546, Reg Sess.) is sponsored by Sen. Brent Howard (R.).
News: StateLegislation DataPrivacy