Privacy law in Oklahoma

There is no signed, comprehensive consumer privacy law in Oklahoma yet. House Bill 1012, the Oklahoma Computer Data Privacy Act (OCDPA), was introduced in the 1st Session of the 60th Legislature (2025) but has not been enacted into law. The bill would give Oklahoma residents meaningful rights over their personal data — including the right to know what is collected, delete it, and control its sale — but until it passes and is signed by the Governor, these rights do not exist under state law. Here is what protections do exist today and what you can still do to protect your data.

What protections do exist in Oklahoma

Oklahoma Security Breach Notification Act

Oklahoma law requires businesses and government agencies that own or license personal data to notify affected Oklahoma residents in the event of a security breach involving their personal information. Notification must be made in the most expedient time possible and without unreasonable delay. (Okla. Stat. tit. 24, §§ 161–166)

Oklahoma Consumer Protection Act (data-related deceptive practices)

Oklahoma's Consumer Protection Act prohibits unfair or deceptive trade practices, which the Oklahoma Attorney General may use to take action against businesses that misrepresent their data collection or privacy practices to consumers. (Okla. Stat. tit. 15, § 751 et seq.)

Oklahoma Student Data Privacy Act

This law restricts how operators of online educational services may collect, use, and share personal information about K-12 students in Oklahoma, and prohibits using student data for targeted advertising or building behavioral profiles. (Okla. Stat. tit. 70, § 3-168 et seq.)

Federal protections that apply to Oklahoma residents

Even without a state privacy law, several federal protections apply to Oklahoma residents. The FTC's Section 5 authority prohibits unfair or deceptive data practices by businesses. HIPAA protects your medical and health information held by covered healthcare providers and insurers. COPPA requires parental consent before companies collect personal data from children under 13. The Gramm-Leach-Bliley Act limits how financial institutions share your personal financial information.

What’s happening in the Oklahoma legislature

Several privacy bills have been introduced in Oklahoma. None has passed into law yet, but they signal where consumer privacy legislation in the state may be heading.

HB 1012 — Oklahoma Computer Data Privacy Act

House Bill 1012 would enact the Oklahoma Computer Data Privacy Act, giving Oklahoma residents the right to know what personal information businesses collect about them, to request deletion of that information, to receive a disclosure of personal information that has been sold or shared, and to opt in or out of the sale of their personal information. The bill would apply to for-profit businesses meeting revenue or data-volume thresholds and would be enforced by the Oklahoma Attorney General with civil penalties up to $7,500 per intentional violation. If enacted, it would take effect one year after signing. Status: introduced.

How Optery helps Oklahoma residents

Data brokers collect and sell personal information about almost every American adult — home addresses, phone numbers, family relationships, employment history. They do this regardless of whether your state has a comprehensive privacy law. Optery scans over 200 data brokers to find where your information is exposed, then submits removal requests on your behalf and tracks compliance. Our service works for every US resident, not just those in states with strong privacy statutes.

See which data brokers have your information →