SB 379 requires websites or businesses publishing arrest booking photographs to remove them within a set timeframe upon a written request from the affected individual. It prohibits charging for removal, bans republication after removal, and allows affected people to sue for civil penalties of $1,000 per day of noncompliance, with recovery funds deposited into the state’s General Revenue Fund. The law excludes businesses that primarily profit from selling or sharing arrest photos, such as mugshot websites that charge for removal.
HB 4083 restricts AI chatbots from offering human-like features (such as pretending to feel emotions or build emotional bonds) to users under 18. It requires chatbot companies to implement age verification systems to prevent minors from accessing these features and mandates safety systems to detect emergencies like self-harm. Therapeutic chatbots providing mental health support may be available to minors only if approved by a licensed professional, with clear disclaimers and clinical evidence of safety. Violations can result in fines up to $7,500 per intentional violation, enforced by the Attorney General or affected minors.
SB 2085 establishes new rules for artificial intelligence in Oklahoma, primarily affecting residents who use AI chatbots and companies providing AI services. It prohibits companion chatbot platforms from serving minors without parental controls, requiring them to offer parents options to manage their child’s account, terminate inappropriate interactions, and disclose privacy practices. The bill also bans AI companies from selling user data without consent, using someone’s likeness in AI-generated content without permission, and restricts state government contracts with AI entities. Violations could trigger civil penalties, and the Oklahoma Attorney General would enforce these provisions.
HB 3959 prohibits large food retailers (over 15,000 sq ft) from using personalized algorithmic pricing that targets consumers based on their data, including requiring clear disclosures like "THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA." It bans electronic shelf labels (ESLs) in these stores, mandating physical price tags instead, and prohibits collecting data on minors under 17 for pricing. The bill also forbids using protected class data (like race, gender, or disability) to set different prices for goods, preventing discriminatory pricing practices. These rules directly affect major grocery chains and aim to increase transparency in pricing strategies.
HB 4110 creates a digital "Transparency and Accountability Platform" (TAP) to enhance verification for Oklahoma's SNAP program and corrections supervision. It requires on-device biometric checks (without storing biometric data), location tracking for events like SNAP enrollment or corrections check-ins, and real-time fraud detection. The bill mandates a 6-12 month pilot program for SNAP before statewide rollout, with quarterly reports to lawmakers, and prohibits denying SNAP benefits due to TAP system failures. The TAP platform operates as a "thin overlay" on existing systems, requiring no replacement of current eligibility or supervision software.
HB 2158 updates Oklahoma's motor vehicle licensing rules for car dealers and related entities. It prohibits manufacturers (factories) from directly engaging in dealership operations, clarifies who qualifies as a "new motor vehicle dealer," and requires dealer management system providers to meet new data security standards. The bill also modifies procedures for license revocation or suspension and updates definitions for terms like "manufacturer" and "distributor." These changes directly affect car dealers, manufacturers, and businesses managing dealer data systems.
HB 2086, the Oklahoma Earned Wage Access Services Act, proposes regulations for companies that allow workers to access earned but unpaid wages before their regular payday. It directly affects Oklahoma workers (defined as residents) and providers of these services, such as apps or employers offering early wage access. Key provisions require providers to clearly disclose all fees, offer at least one free access option, allow easy cancellation without fees, protect consumer data, and handle tips as voluntary. The bill also prohibits sharing employment data without consent and mandates compliance with federal electronic fund transfer laws. This legislation is currently pending in the Oklahoma House Business Committee.
HB 1762 requires online services targeting Oklahoma children (defined as under 18) to conduct data protection impact assessments and design products in the "best interest of children." It prohibits covered entities (online services processing children's data) from using "dark patterns" to manipulate choices, collecting excessive data, or processing data in ways that could cause physical, emotional, or privacy harm. The law mandates age-appropriate default privacy settings, bans selling or sharing precise geolocation data without consent, and clarifies that de-identified data or public information is excluded. It explicitly states the law does not create private lawsuits for violations or apply to services not reasonably likely to be accessed by children.
SB 857 authorizes Oklahoma law enforcement agencies to use automatic license plate reader (ALPR) systems on highway rights-of-way under specific conditions. It requires agencies to obtain a Department of Transportation permit, adopt public policies covering data use and security, and delete most license plate data within 30 days unless part of an active investigation. The bill prohibits using ALPRs to issue traffic citations or sell collected data, mandates encryption for data security, and requires agencies to maintain access logs for accountability. This directly affects law enforcement operations and the privacy of drivers whose license plates are scanned, with the law taking effect November 1, 2025.
HB 1012, the Oklahoma Computer Data Privacy Act, establishes new rights for Oklahoma consumers regarding their personal data collected by businesses. It directly affects for-profit businesses (excluding ISPs acting as such) that gather consumer information, requiring them to provide clear privacy disclosures, allow consumers to request access or deletion of their data, and enable opting out of data sales. Key mechanisms include mandating businesses to verify consumer requests, disclose data practices online, prohibit discrimination for exercising privacy rights, and impose civil penalties for violations. The law empowers the Oklahoma Attorney General to enforce these provisions and collect penalties into a dedicated state fund. It aligns with federal privacy laws but prioritizes the strongest consumer protections when conflicts arise.
