Technology (Data Privacy)

passed both · Oklahoma · Senate Apr 29, 2026

SB 1521: Artificial intelligence; definitions; requiring operators make certain disclosure; preventative measures for minor account holders; prohibitions; enforcement authority to Attorney General; civil penalty. Effective date.

Oklahoma's SB 1521 prohibits AI chatbots designed to simulate emotional relationships (called "companion" chatbots) if they risk encouraging minors to engage in sexual content, self-harm, or violence. It requires all AI chatbot providers to implement verified age checks using state-issued ID (not just birth dates) before allowing access, and bans minors from using companion chatbots. The bill also mandates that chatbots clearly disclose they are AI at the start of each conversation and every 30 minutes, while restricting data collection and prohibiting the sharing of age verification information. These rules apply to any AI chatbot service operating in Oklahoma, with enforcement by the Attorney General.

Topics ✓ TechnologySupports TechnologyMandates age verification, AI disclosure, and bans harmful chatbots to protect minors, advancing data privacy and consumer protection in AI technology.95% confidence

Sub-Topics Artificial Intelligence Data Privacy Online Safety

Track

died · Oklahoma · House Feb 4, 2026

HB 3959: Technology; Protecting Consumers and Jobs from Predatory Pricing Act; personalized algorithmic pricing; consumer data; food retailers; effective date.

HB 3959 prohibits large food retailers (over 15,000 sq ft) from using personalized algorithmic pricing that targets consumers based on their data, including requiring clear disclosures like "THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA." It bans electronic shelf labels (ESLs) in these stores, mandating physical price tags instead, and prohibits collecting data on minors under 17 for pricing. The bill also forbids using protected class data (like race, gender, or disability) to set different prices for goods, preventing discriminatory pricing practices. These rules directly affect major grocery chains and aim to increase transparency in pricing strategies.

Topics ✓ TechnologySupports TechnologyRestricts algorithmic pricing using consumer data, mandates disclosures, and prohibits data collection on minors - enhancing data privacy protections per bill's explicit focus.95% confidence

Sub-Topics Artificial Intelligence Consumer Data Protection Data Privacy

Track

passed · Oklahoma · House Apr 13, 2026

HB 3647: Health information; creating the Oklahoma Health Care Transparency Initiative Act of 2026; requiring and authorizing submission of certain data; providing data privacy and security protections; providing penalties; establishing Health Care Cost Transparency Board.

HB 3647 creates the "Oklahoma Health Care Transparency Initiative" requiring most licensed health care providers in Oklahoma to submit anonymized claims and enrollment data to a state-designated health information exchange starting July 1, 2026. It establishes an Office within the Oklahoma Health Care Authority to oversee the initiative, with limited exemptions for providers facing financial hardship, small practice size, or technological limitations. The law mandates strict confidentiality and privacy protections for patient data, aligning with federal standards like HIPAA, and prohibits misuse of the collected information. This initiative aims to build a centralized database for health care cost and utilization data, primarily affecting hospitals, clinics, and insurers participating in Oklahoma's health care system.

Topics ✓ TechnologySupports TechnologyMandates strict confidentiality, privacy, and security for health data exchange, aligning with data privacy protections in technology policy.95% confidence

Sub-Topics Data Privacy

Track

died · Oklahoma · House Feb 4, 2026

HB 3547: Schools; Parent Data Sovereignty Act of 2026; legislative findings; definitions; prohibiting student data use or transfer for commercial purposes; parental rights to student data; opt out; Data Transparency Portal; contractors and vendors protection of data; violations; rules; effective date.

HB 3547, the Parent Data Sovereignty Act of 2026, gives parents legal control over their minor children's personally identifiable educational data collected by Oklahoma schools and state education agencies. It prohibits schools and contractors from selling, licensing, or using student data for commercial purposes without parental consent, requires schools to provide parents with full access to their child's data and opt-out options for non-essential data collection, and mandates a public Data Transparency Portal listing all collected data elements and sharing agreements. The bill also requires contractors handling student data to follow strict security protocols and face civil penalties of up to $10,000 per violation for unauthorized data use or disclosure. These provisions directly affect parents of K-12 students and all public schools or vendors collecting student data in Oklahoma.

Topics ✓ TechnologySupports TechnologyProhibits commercial use of student data without consent, mandates parental access and opt-outs, directly protecting data privacy in educational technology contexts.95% confidence

Sub-Topics Data Privacy

Track

in committee · Oklahoma · Senate Feb 12, 2026

SB 1871: Social media; requiring certain age verification; mandating the segregation of certain user data; requiring certain parental consent. Emergency.

SB 1871 requires social media platforms operating in Oklahoma to verify the age of users using state-issued ID (not just birth dates) and obtain parental consent for users under 18. Platforms must segregate minors' personal data, set default privacy settings to restrict visibility to "connected accounts" (like family/friends), disable search indexing of minor profiles, and limit data sharing. It mandates platforms to freeze existing accounts and verify ages by a specified deadline, with strict security measures for minor user data. The bill directly affects all social media platforms serving Oklahoma residents, minors under 18, and their parents/guardians who must provide consent.

Topics ✓ TechnologySupports TechnologyRequires age verification, parental consent, data segregation, and strict privacy defaults for minors, directly strengthening data privacy protections for users on social media platforms.92% confidence

Sub-Topics Data Privacy Online Safety Social Media

Track

in committee · Oklahoma · Senate Feb 3, 2026

SB 1972: Internet; creating the Oklahoma Children's Internet Protection Act. Effective date.

SB 1972, the Oklahoma Children's Internet Protection Act, requires online platforms (interactive computer service providers) to obtain parental or guardian consent before entering contracts with minors under 18. It prohibits platforms from sharing minors' personal information - including names, images, location data, or likeness - without this consent. Platforms must verify parental consent through specific methods like signed forms, video calls, or verified email. Violations can result in civil penalties enforced by the Oklahoma Attorney General.

Topics ✓ TechnologySupports TechnologyRequires parental consent for minors' data sharing, strengthening privacy protections for children online per bill's data restriction and consent mandates.95% confidence

Sub-Topics Data Privacy Online Safety Social Media

Track

passed · Oklahoma · House Apr 16, 2026

HB 3380: Children; Fostering the Future for Oklahoman Children and Families Act; Department of Human Services; tasks; time period; authority or functions; departments or agencies; applicable laws; report; codification; effective date.

HB 3380, the "Fostering the Future for Oklahoman Children and Families Act," requires Oklahoma's Department of Human Services (DHS) to modernize child welfare systems within 180 days of its effective date. It mandates improved data collection and transparency, expansion of AI-driven tools for caregiver matching and funding efficiency, and annual public scorecards tracking outcomes like reducing foster care duration and improving child safety. The bill also directs DHS to create a new initiative supporting youth transitioning from foster care through online resource platforms, educational scholarships, and reallocated funding for job training. Additionally, it requires DHS to address religious accommodations for faith-based partners and foster family placements. The law takes effect November 1, 2026.

Topics ✓ TechnologySupports TechnologyMandates expansion of AI-driven tools for caregiver matching and funding efficiency, directly advancing technology use in child welfare systems.90% confidence

Sub-Topics Artificial Intelligence Data Privacy

Track

signed · Oklahoma · Senate May 28, 2025

SB 626: Security Breach Notification Act; requiring notice of security breach of certain information; modifying provisions. Effective date.

SB 626, the Security Breach Notification Act, requires businesses to notify Oklahomans when specific personal data used to verify identity (like Social Security numbers or account credentials) is compromised in a security breach. This law directly affects businesses and organizations that collect or store such identifying information, including credit bureaus, healthcare providers, and financial institutions. The key provision clarifies that notifications are mandated only when data enabling authentication of an individual is breached, not for all types of data. The law became effective on May 28, 2025, without the Governor's signature.

Topics ✓ TechnologySupports TechnologyMandates breach notifications for personal data, strengthening consumer data privacy protections per bill's core requirement.95% confidence

Sub-Topics Data Privacy

in committee · Oklahoma · Senate Feb 3, 2026

SB 1229: Driver licenses; requiring certain personal information be stored in certain database; requiring Service Oklahoma to delete certain information after certain period. Emergency.

SB 1229 requires Oklahoma's Service Oklahoma to store specific personal information - including full name, date of birth, biometric photos, address, and license number - related to REAL ID Noncompliant driver license applications in a separate, secure database. The bill mandates that this data must be deleted after a specified period, with the definition of "personally identifiable information" explicitly excluding Social Security numbers. This law directly affects Oklahoma residents applying for driver licenses or identification cards, particularly those seeking non-REAL ID compliant options. The measure aims to enhance data privacy by creating strict storage and deletion protocols for sensitive applicant information.

Topics ✓ TechnologySupports TechnologyMandates secure storage and deletion of personal data for driver licenses, a standard data privacy protection measure. Excludes Social Security numbers to safeguard sensitive information.90% confidence

Sub-Topics Data Privacy

Track

signed · Oklahoma · House May 28, 2025

HB 2289: Judicial and elected official security and privacy; creating the Oklahoma Elected Official and Judicial Security and Privacy Act of 2025; effective date; emergency.

HB 2289 creates the Oklahoma Elected Official and Judicial Security and Privacy Act of 2025, requiring state agencies to remove specific personal details - including home addresses, phone numbers, school locations, and children's information - from public records for elected officials, judges, and their immediate families. Agencies must delete such "covered information" within 72 hours of a request and cannot publicly display it. The law also mandates annual reports to the legislature on security spending and data collection methods related to protecting these individuals. It became law without the Governor’s signature on May 28, 2025.

Topics ✓ TechnologySupports TechnologyBill mandates removal of personal data (addresses, phone numbers) from public records to protect privacy, directly supporting data privacy within technology policies.90% confidence

Sub-Topics Data Privacy