Oklahoma's Consumer Privacy Law Takes Effect January 2027
Oklahoma's SB 546 consumer privacy law takes effect January 2027.
Why it matters: The law impacts tech and retail industries handling large consumer data volumes, requiring compliance changes.
- Signed by Governor Stitt on March 20, 2026.
- Applies to firms with 100,000 consumers' data or 25,000 if data sales.
- Empowers consumers to access, correct, and delete personal data.
- AG enforces with penalties up to $7,500 per infraction.
On March 20, 2026, Oklahoma Governor Kevin Stitt signed Senate Bill 546 into law, charting a new course for consumer data privacy in the state. Available details from the Oklahoma House of Representatives outline its scope and implications.
Effective January 1, 2027, SB 546 requires companies that handle the personal data of over 100,000 consumers, or 25,000 consumers when more than 50% of revenue is from data sales, to adhere to strict privacy protocols. This holds particular significance for tech giants and data-centric businesses.
The legislation grants Oklahoma residents rights to access, amend, and delete their personal data, along with opting out of data sales and targeted ads. This shifts operational norms for businesses engaging in data-heavy operations.
The law mandates that businesses provide transparent privacy notices and secure explicit consent to process sensitive data. In high-risk data processing scenarios, companies must conduct thorough data protection assessments, aligning with enhanced transparency objectives.
Enforcement lies with the Attorney General, authorized to levy penalties up to $7,500 per violation. Critically, organizations like Consumer Reports and EPIC have raised concerns about enforcement robustness and the lack of a universal opt-out feature, while the U.S. Chamber of Commerce regards the measure as a balanced approach to privacy and business interests.
By the numbers:
- $7,500 — Maximum penalty per violation under the new law.
- 100,000 — Minimum consumer data count for compliance requirement.
- March 20, 2026 — Date of SB 546 signing into law.
Yes, but: Critics argue the law lacks a universal opt-out provision.