HB 3547, the Parent Data Sovereignty Act of 2026, gives parents legal control over their minor children's personally identifiable educational data collected by Oklahoma schools and state education agencies. It prohibits schools and contractors from selling, licensing, or using student data for commercial purposes without parental consent, requires schools to provide parents with full access to their child's data and opt-out options for non-essential data collection, and mandates a public Data Transparency Portal listing all collected data elements and sharing agreements. The bill also requires contractors handling student data to follow strict security protocols and face civil penalties of up to $10,000 per violation for unauthorized data use or disclosure. These provisions directly affect parents of K-12 students and all public schools or vendors collecting student data in Oklahoma.
SB 1871 requires social media platforms operating in Oklahoma to verify the age of users using state-issued ID (not just birth dates) and obtain parental consent for users under 18. Platforms must segregate minors' personal data, set default privacy settings to restrict visibility to "connected accounts" (like family/friends), disable search indexing of minor profiles, and limit data sharing. It mandates platforms to freeze existing accounts and verify ages by a specified deadline, with strict security measures for minor user data. The bill directly affects all social media platforms serving Oklahoma residents, minors under 18, and their parents/guardians who must provide consent.
SB 1972, the Oklahoma Children's Internet Protection Act, requires online platforms (interactive computer service providers) to obtain parental or guardian consent before entering contracts with minors under 18. It prohibits platforms from sharing minors' personal information - including names, images, location data, or likeness - without this consent. Platforms must verify parental consent through specific methods like signed forms, video calls, or verified email. Violations can result in civil penalties enforced by the Oklahoma Attorney General.
HB 4190 creates a Cyber Crime and Fraud Unit within Oklahoma's State Bureau of Investigation (OSBI) to investigate cyber-enabled crimes, financial fraud, and digital evidence cases. It funds the unit through a one-time $3 million appropriation from general funds and a new $2 annual fee on motor vehicle insurance renewals (collected by insurers and remitted to OSBI). The unit operates within OSBI's existing jurisdiction, using funds for personnel, technology, training, and operations, with all revenues deposited into a dedicated revolving fund. The bill requires OSBI to provide annual reports on fund usage and takes effect November 1, 2026.
SB 1751 creates a secure digital platform for reporting human trafficking in Oklahoma, requiring the Attorney General to contract with a nonprofit organization to develop and manage it. Mandated reporters (such as teachers, healthcare workers, and social workers) can use this platform to anonymously report suspected trafficking, with high-priority cases automatically routed to law enforcement or child protection agencies in real time. The platform must comply with privacy laws (including HIPAA), allow anonymous reporting, and integrate with existing systems like the National Human Trafficking Hotline. The bill becomes effective November 1, 2026.
HB 3299 prohibits creating and sharing synthetic media (such as deepfakes) that falsely depict a person's name, image, voice, or likeness without their written consent, unless used for news, commentary, satire, or parody. It requires political advertisements using such media during election periods (45 days before elections) to clearly disclose that the content is synthetic, with violations punishable as misdemeanors. For non-political use, creating synthetic media without consent is a misdemeanor, but becomes a felony if it causes over $25,000 in financial harm or is used for extortion. Victims can also seek civil damages, including legal fees, for violations.
HB 3544 prohibits AI chatbots with human-like features (e.g., claiming sentience or seeking emotional bonds) from being available to minors under 18. It requires developers to implement age verification systems and offer alternative versions without such features for minors. Therapeutic chatbots providing mental health support are exempt if they include clear disclaimers, require professional oversight, provide clinical evidence of safety, and maintain transparency. Violations could result in civil penalties up to $7,500 per intentional violation, with minors or parents able to seek damages of $100-$750 per incident. The law takes effect November 1, 2026.
HB 4132 creates liability protection for Oklahoma counties and municipalities if they adopt specific cybersecurity frameworks (NIST, CIS, or ISO standards) and meet compliance requirements. To qualify, local governments must annually certify compliance, maintain detailed security documentation, and undergo independent cybersecurity reviews every three years. This bill directly affects county and municipal operations by reducing legal risk from data breaches when these steps are followed. It does not change existing cybersecurity practices but provides a legal shield for entities that implement recognized standards. The law takes effect November 1, 2026.
HB 4110 creates a digital "Transparency and Accountability Platform" (TAP) to enhance verification for Oklahoma's SNAP program and corrections supervision. It requires on-device biometric checks (without storing biometric data), location tracking for events like SNAP enrollment or corrections check-ins, and real-time fraud detection. The bill mandates a 6-12 month pilot program for SNAP before statewide rollout, with quarterly reports to lawmakers, and prohibits denying SNAP benefits due to TAP system failures. The TAP platform operates as a "thin overlay" on existing systems, requiring no replacement of current eligibility or supervision software.
HB 3380, the "Fostering the Future for Oklahoman Children and Families Act," requires Oklahoma's Department of Human Services (DHS) to modernize child welfare systems within 180 days of its effective date. It mandates improved data collection and transparency, expansion of AI-driven tools for caregiver matching and funding efficiency, and annual public scorecards tracking outcomes like reducing foster care duration and improving child safety. The bill also directs DHS to create a new initiative supporting youth transitioning from foster care through online resource platforms, educational scholarships, and reallocated funding for job training. Additionally, it requires DHS to address religious accommodations for faith-based partners and foster family placements. The law takes effect November 1, 2026.