Oklahoma SB546: Data privacy; establishing consumer rights; appeal process; privacy notice; data protection assessments; penalties; liability. Effective date.

What the bill says

An Act relating to data privacy; defining terms; establishing consumer rights for processing of certain data; requiring compliance with certain consumer requests; establishing procedures for response to certain consumer requests; requiring establishment of certain appeal process; prohibiting certain contractual provisions; requiring establishment of methods for submission of certain consumer requests; establishing duties of controller; prohibiting controller from taking certain actions; providing exceptions; requiring privacy notice; specifying required contents in privacy notice…

From the enrolled text, March 17, 2026:

An Act relating to data privacy; defining terms; establishing consumer rights for processing of certain data; requiring compliance with certain consumer requests; establishing procedures for response to certain consumer requests; requiring establishment of certain appeal process; prohibiting certain contractual provisions; requiring establishment of methods for submission of certain consumer requests; establishing duties of controller; prohibiting controller from taking certain actions; providing exceptions; requiring privacy notice; specifying required contents in privacy notice; requiring certain disclosures; establishing duties of processor; establishing requirements for certain contracts; authorizing use of independent assessor under certain circumstances; requiring data protection assessments under certain circumstances; establishing requirements for data protection assessments; requiring availability of data protection assessments to Attorney General upon request; providing for confidentiality of data protection assessments; specifying applicability of requirements for data protection assessments; requiring controller in possession of certain data to take certain actions; providing enforcement authority to the Attorney General; requiring posting of certain information on Attorney General website; requiring notice of certain action; requiring certain period to cure violations before bringing certain action; providing penalties for certain violations; authorizing award of certain fees and expenses; providing for applicability of provisions; providing exceptions to applicability of provisions; exempting certain information; providing for compliance under certain circumstances; providing construing provisions; authorizing processing of personal data for certain purposes; prohibiting violation of evidentiary privileges; …