Data Security & Breach Notification
Oklahoma data breach notification law
OK Breach Notification
Oklahoma · Varies by state
SB 626 (effective Jan 1, 2026) broadened the definition of covered personal information (adding government IDs, unique electronic identifiers, and biometric data) and created a new formal 60-day AG notice process for breaches affecting 500+ residents. Applies regardless of company size whenever you hold covered personal information about a resident of this state.
24 Okla. Stat. §§ 161–166, as amended by 2026 SB 626Read statute →
This is a general reference, not legal advice or a determination that this law applies to your specific business. Run the full questionnaire to check against your actual revenue, data volume, and data types.