Major Data Privacy Bill Signed into Law; New law, effective 2027, gives Oklahomans greater control over personal information

A comprehensive bill strengthening data privacy protections for Oklahomans has been signed into law.
Senate Bill 546, authored by House Majority Floor Leader Josh West, R-Grove, and Sen. Brent Howard, R-Altus, establishes new consumer rights regarding personal data and creates clear rules for businesses that collect and process information from Oklahoma residents. Under the new law, Oklahomans will be able to access, correct, delete and obtain copies of their personal data, as well as opt out of the sale of their personal data and certain targeted advertising practices.
West, who has pushed for strong data privacy laws in Oklahoma since 2019, said Oklahomans deserve to have a say in how their private information is used.
"In the age of the internet, personal data is valuable currency," West said. "People deserve to know how their data is being used and have the ability to make decisions about that information. Senate Bill 546 gives Oklahomans meaningful control over their own data while establishing clear standards for businesses operating in our state."
SB546 applies to businesses operating in Oklahoma that either process personal data of over 100,000 consumers or process data of 25,000 consumers while earning a majority of their revenue from selling data. The legislation also requires businesses to provide transparent privacy notices, maintain reasonable data security practices and obtain consent before processing sensitive personal information. If companies fail to comply, the Oklahoma Attorney General could take action against them.
"Senate Bill 546 puts Oklahomans back in control of their personal data," Howard said. "For too long, technology companies and online platforms have collected and sold consumers’ personal information, including search histories, spending habits and other browsing data, without giving them the chance to opt out. This new law protects Oklahomans’ privacy online by giving every individual the right to know what data is being collected, while also giving them the power to delete that information and prevent it from being sold."
West said the policy has been a long time coming. In 2021, he authored legislation that would have implemented the strongest data privacy law in the nation. The measure, which was coauthored by 44 legislators, passed the House broadly but stalled in the legislative process.
"I started working on this legislation in 2019 after a conversation with former Representative Collin Walke," West said. "After seven years and five drafts, Oklahomans will finally have the say they deserve in how their personal data is used. I appreciate Senator Howard's work to push Senate Bill 546 across the finish line and thank the governor for signing it into law."
There are exemptions for certain entities, including state agencies, nonprofits and higher education institutions, as well as exemptions for organizations working with data already regulated by federal laws, such as HIPAA.
SB546 will take effect January 1, 2027.