Oklahoma consumer data privacy act (SB 546, 2025-2026; Title 75A): profiling opt-out and data protection assessments, effective January 1, 2027

Summary

Oklahoma's comprehensive consumer data privacy law, enacted as SB 546 (approved by the Governor on March 20, 2026) and taking effect on January 1, 2027. It applies to controllers and processors doing business in Oklahoma or targeting its residents that in a calendar year control or process personal data of at least 100,000 consumers, or of at least 25,000 consumers while deriving over half of gross revenue from selling personal data. Financial institutions and data subject to Title V of the Gramm-Leach-Bliley Act are exempt. Consumers may opt out of profiling in furtherance of a decision that produces a legal or similarly significant effect, defined to include decisions on financial and lending services, housing, insurance, health care, education, employment, criminal justice and basic necessities; profiling is limited to solely automated processing. Controllers must conduct a data protection assessment for profiling that presents a reasonably foreseeable risk of unfair or deceptive treatment, unlawful disparate impact, or financial, physical or reputational injury. The Attorney General has exclusive enforcement authority, must give 30 days' written notice and an opportunity to cure, and may seek civil penalties of up to $7,500 per violation; there is no private right of action.

Key dates

1. March 20, 2026Enacted
2. October 16, 2026Checked against sources
3. October 21, 2026Checked against sources
4. January 1, 2027Takes effect

Developments are added when the record is reviewed. Next review: January 15, 2027.

Evidence

Each passage is quoted from its source. The quoted passages are re-checked against the live pages every month.

1. An Act relating to data privacy; defining terms; establishing consumer rights for processing of certain data

   Supports: Bill number and subject

   This act shall become effective January 1, 2027.

   Supports: Effective date

   controls or processes personal data of at least one hundred thousand (100,000) consumers, or b. controls or processes personal data of at least twenty-five thousand (25,000) consumers and derives over fifty percent (50%) of gross revenue from the sale of personal data

   Supports: Applicability thresholds

   A financial institution or data subject to Title V of the Gramm-Leach-Bliley Act

   Supports: GLBA exemption

   “Profiling” means any form of solely automated processing performed on personal data to evaluate, analyze, or predict personal aspects related to an identified or identifiable individual’s economic situation

   Supports: Profiling definition

   means a decision made by the controller that results in the provision or denial by the controller of: a. financial and lending services

   Supports: Decisions with legal or similarly significant effects include financial and lending services

   Opt out of the processing of the personal data for purposes of: a. targeted advertising, b. the sale of personal data, or c. profiling in furtherance of a decision that produces a legal or similarly significant effect concerning the consumer.

   Supports: Profiling opt-out

   The processing of personal data for purposes of profiling, if the profiling presents a reasonably foreseeable risk of: a. unfair or deceptive treatment of or unlawful disparate impact on consumers, b. financial, physical, or reputational injury to consumers

   Supports: Assessment duty for risky profiling

   The Attorney General has exclusive authority to enforce the provisions of this act.

   Supports: Attorney General enforcement

   no later than thirty (30) days before bringing the action, identifying the specific provisions of this act that the Attorney General alleges have been or are being violated

   Supports: Notice and cure

   exceed Seven Thousand Five Hundred Dollars ($7,500.00) for each violation

   Supports: Penalty

   Nothing in this act shall be construed as providing a basis for, or being subject to, a private right of action for a violation of this act or any other provision of law.

   Supports: No private right of action

   Enrolled Senate Bill No. 546 (2025-2026) Oklahoma Legislature Primary source

2. Approved by Governor 03/20/2026

   Supports: Approval date

   SB 546 bill information (2026 session) Oklahoma Legislature Primary source