SB 2037 requires licensed mental health professionals and health care providers in Oklahoma to obtain written, informed consent from patients before using artificial intelligence (AI) for therapy or psychotherapy services. The bill prohibits AI from making independent therapeutic decisions, directly interacting with clients during sessions, generating treatment plans without provider review, or detecting emotions. It mandates that providers maintain full responsibility for all AI-assisted interactions and explicitly states that final clinical decisions must be made by licensed professionals, not AI systems. Violations may result in disciplinary action and fines up to $10,000 per incident, enforced by licensure boards or the Attorney General.
SB 1716 amends Oklahoma's Security Breach Notification Act to limit class action lawsuits against private entities following cybersecurity breaches. It prohibits class action liability unless a breach results from the entity's "willful and wanton conduct or gross negligence." The bill also clarifies that private entities using reasonable safeguards and providing required breach notices cannot be held liable for civil penalties, while those failing to use reasonable safeguards face reduced penalties ($75,000) but not class actions. This directly affects businesses and organizations handling personal data in Oklahoma, shifting enforcement exclusively to the Attorney General or district attorneys for most cases.
HB 3959 prohibits large food retailers (over 15,000 sq ft) from using personalized algorithmic pricing that targets consumers based on their data, including requiring clear disclosures like "THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA." It bans electronic shelf labels (ESLs) in these stores, mandating physical price tags instead, and prohibits collecting data on minors under 17 for pricing. The bill also forbids using protected class data (like race, gender, or disability) to set different prices for goods, preventing discriminatory pricing practices. These rules directly affect major grocery chains and aim to increase transparency in pricing strategies.
HB 3647 creates the "Oklahoma Health Care Transparency Initiative" requiring most licensed health care providers in Oklahoma to submit anonymized claims and enrollment data to a state-designated health information exchange starting July 1, 2026. It establishes an Office within the Oklahoma Health Care Authority to oversee the initiative, with limited exemptions for providers facing financial hardship, small practice size, or technological limitations. The law mandates strict confidentiality and privacy protections for patient data, aligning with federal standards like HIPAA, and prohibits misuse of the collected information. This initiative aims to build a centralized database for health care cost and utilization data, primarily affecting hospitals, clinics, and insurers participating in Oklahoma's health care system.
HB 3176 creates the Oklahoma Gas, Artificial Intelligence, and Space Research Hub (GAS Hub) as the state's central coordinator for recruiting a U.S. National Laboratory. The hub will prepare federal-ready sites, coordinate workforce development, aggregate state incentives, and serve as Oklahoma's formal applicant to agencies like the Department of Energy and NASA. It requires the Oklahoma Department of Commerce to administer the hub, working with state agencies including the Oklahoma Space Industry Development Authority. The bill mandates annual reports on federal engagement and site readiness, with implementation effective November 1, 2026.
SB 1429 allows public school foundations (nonprofit organizations with 501(c)(3) status) to spend funds on specific educational purposes for public school districts. It permits foundations to cover teacher professional development, employee/student scholarships, literacy initiatives, STEM equipment/supplies, technology support, and staff conference fees. The bill takes effect July 1, 2026, and declares an emergency to expedite implementation. This directly affects school districts and foundations by expanding allowable uses of foundation funds for classroom and staff support.
HB 3547, the Parent Data Sovereignty Act of 2026, gives parents legal control over their minor children's personally identifiable educational data collected by Oklahoma schools and state education agencies. It prohibits schools and contractors from selling, licensing, or using student data for commercial purposes without parental consent, requires schools to provide parents with full access to their child's data and opt-out options for non-essential data collection, and mandates a public Data Transparency Portal listing all collected data elements and sharing agreements. The bill also requires contractors handling student data to follow strict security protocols and face civil penalties of up to $10,000 per violation for unauthorized data use or disclosure. These provisions directly affect parents of K-12 students and all public schools or vendors collecting student data in Oklahoma.
SB 2038 prohibits health insurance companies in Oklahoma from using artificial intelligence (AI) systems to make final decisions denying, reducing, or terminating coverage or benefits. Instead, all such decisions must be reviewed and issued by licensed healthcare providers, not AI. The bill requires insurers to disclose to patients that human providers - not AI - made the final decision, and mandates that insurers consult a patient’s treating provider on medical necessity before denying coverage. These requirements apply directly to health insurance issuers operating in Oklahoma and affect patients whose claims are reviewed by insurers.
SB 1871 requires social media platforms operating in Oklahoma to verify the age of users using state-issued ID (not just birth dates) and obtain parental consent for users under 18. Platforms must segregate minors' personal data, set default privacy settings to restrict visibility to "connected accounts" (like family/friends), disable search indexing of minor profiles, and limit data sharing. It mandates platforms to freeze existing accounts and verify ages by a specified deadline, with strict security measures for minor user data. The bill directly affects all social media platforms serving Oklahoma residents, minors under 18, and their parents/guardians who must provide consent.
SB 1734, the Oklahoma Responsible Technology in Schools Act, restricts AI tool use in public schools to educator-supervised settings, requiring all classroom AI applications to operate under teacher oversight ("human-in-the-loop") with educators reviewing outputs before use in instruction or assessment. It prohibits AI from determining high-stakes outcomes like grading, discipline, or student placement, and mandates school districts to adopt policies by the 2027-2028 school year covering data privacy, appropriate use, and transparency for families. The State Department of Education must develop guidance to help districts comply, while ensuring AI tools meet federal privacy laws (like FERPA) and minimize student data sharing. The bill takes effect July 1, 2026, and does not compel schools to adopt AI but sets guardrails for its responsible use.
