Technology (Consumer Data Protection)

HB 1626 regulates how Oklahoma law enforcement agencies use automatic license plate reader (ALPR) systems on highways. It requires agencies to obtain permits from the Oklahoma Department of Transportation before installation, adopt public policies covering data security, retention (deleting data after 30 days unless part of an active investigation), and prohibiting data sales, and limits use to official law enforcement purposes only. The bill explicitly prohibits using ALPRs to issue traffic citations or create hot lists without documented law enforcement justification. It applies to all state and local law enforcement agencies using these systems and takes effect November 1, 2025.

This resolution (SR 18) affirms Oklahoma's right to opt out of the federal REAL ID system and supports residents' choice between REAL ID-compliant and non-compliant state ID cards. It specifically requires the state to prohibit sharing personal and biometric data (like fingerprints or facial scans) for non-compliant IDs with the federal government without a court-approved warrant. The resolution directly affects Oklahomans who choose non-compliant IDs, ensuring their data isn't shared federally absent legal authorization. It emphasizes protecting privacy while maintaining the state's existing option to offer both ID types.

SB 546 establishes data privacy rights for Oklahoma residents by requiring businesses that process personal data (referred to as "controllers") to honor consumer requests about their information. It mandates clear privacy notices, prohibits deceptive "dark patterns" for consent, and gives consumers rights to access, correct, or delete their data. The law excludes health data covered by HIPAA, certain nonprofit organizations, and educational institutions. Businesses must respond to requests within specific timeframes and implement data protection measures, with enforcement by the Attorney General.