Technology

HB 3545 restricts how Oklahoma state agencies can use artificial intelligence, directly affecting all state departments, commissions, and offices. It prohibits AI from manipulating behavior, enabling discriminatory classification, conducting general public surveillance via facial recognition (except for locating missing persons), or creating malicious deepfakes. The bill requires human review and approval for high-risk AI decisions (like benefits or legal rights), mandates disclosure when AI generates content, and requires agencies to inform users they're interacting with AI. Agencies must remove prohibited systems by September 2027, report compliance to the Office of Management and Enterprise Services (OMES), and submit annual reports detailing AI use starting December 2026.

HB 4132 creates liability protection for Oklahoma counties and municipalities if they adopt specific cybersecurity frameworks (NIST, CIS, or ISO standards) and meet compliance requirements. To qualify, local governments must annually certify compliance, maintain detailed security documentation, and undergo independent cybersecurity reviews every three years. This bill directly affects county and municipal operations by reducing legal risk from data breaches when these steps are followed. It does not change existing cybersecurity practices but provides a legal shield for entities that implement recognized standards. The law takes effect November 1, 2026.

SB 546 establishes data privacy rights for Oklahoma residents by requiring businesses that process personal data (referred to as "controllers") to honor consumer requests about their information. It mandates clear privacy notices, prohibits deceptive "dark patterns" for consent, and gives consumers rights to access, correct, or delete their data. The law excludes health data covered by HIPAA, certain nonprofit organizations, and educational institutions. Businesses must respond to requests within specific timeframes and implement data protection measures, with enforcement by the Attorney General.