SB 626, the Security Breach Notification Act, requires businesses to notify Oklahomans when specific personal data used to verify identity (like Social Security numbers or account credentials) is compromised in a security breach. This law directly affects businesses and organizations that collect or store such identifying information, including credit bureaus, healthcare providers, and financial institutions. The key provision clarifies that notifications are mandated only when data enabling authentication of an individual is breached, not for all types of data. The law became effective on May 28, 2025, without the Governor's signature.
SB 68 amends Oklahoma's Information Technology Consolidation and Coordination Act to require state agencies to obtain a Memorandum of Understanding (MOU) with the Chief Information Officer (CIO) before hiring IT staff. The MOU must detail specific job roles, qualifications, and the agency's commitment to follow CIO-established security and data integrity standards. Agencies cannot hire IT personnel until the CIO and the agency fully execute the MOU, and the CIO may audit compliance with the agreement. This emergency law became effective immediately without the Governor's signature on May 26, 2025.
HB 1547 updates Oklahoma's rules for county agricultural fairs and funding. It allows fair associations to spend funds on digital communication tools (like internet and email) and clarifies that officers must attend at least 50% of meetings to retain their positions. The bill also adds a 12-hour voting window for electing fair association leaders and expands allowable expenses to include transporting exhibits between local and state fairs. Counties can now levy up to 1 mill per $1,000 in property value (or 0.25 mills in larger counties) to fund fair operations, premiums, maintenance, and advertising. These changes directly affect county fair associations, county excise boards, and local governments managing agricultural fairs across Oklahoma.
HB 1124 modifies Oklahoma's Statewide Recovery Fund to specify that funds from the federal American Rescue Plan Act (specifically sections for coronavirus capital projects and state/local recovery funds) will be directed to this fund, excluding money designated for local governments. It clarifies that all interest earned on these deposits will also be added to the fund. The bill ensures these funds are available for broadband-related projects without requiring new appropriations. It takes effect November 1, 2025, and became law without the governor's signature on May 12, 2025.
SB 646 would create Oklahoma's Federal Official Security Act, requiring state agencies to remove specific personal information of federal officials and their immediate families from public records. Covered information includes home addresses, phone numbers, email addresses, Social Security numbers, school locations for family members, and property details. Agencies must delete such information within 72 hours of a written request, with exceptions for court orders or signed releases. The law aims to prevent public exposure of sensitive data while allowing access under legal circumstances.
HB 2158 updates Oklahoma's motor vehicle licensing rules for car dealers and related entities. It prohibits manufacturers (factories) from directly engaging in dealership operations, clarifies who qualifies as a "new motor vehicle dealer," and requires dealer management system providers to meet new data security standards. The bill also modifies procedures for license revocation or suspension and updates definitions for terms like "manufacturer" and "distributor." These changes directly affect car dealers, manufacturers, and businesses managing dealer data systems.
SB 139 requires Oklahoma public school district boards of education to adopt cell phone policies by the 2025-2026 school year. Starting in the 2026-2027 school year, boards may choose to implement policies prohibiting students from using cell phones or personal electronic devices on school campuses "from bell to bell" during school hours. The bill directly affects school districts by setting a timeline for policy adoption and defining the scope of device restrictions during instructional time. This legislation, approved by the governor on May 3, 2025, provides a framework for district-level decisions without mandating specific enforcement.
HB 1364 prohibits the nonconsensual sharing of AI-generated sexual images or real images of someone in a sexual act or showing intimate body parts without their consent. It defines "artificially generated sexual depiction" as images created using AI or photo editing that appear authentic but did not occur in reality. Violating this law is a misdemeanor (up to 1 year in jail or $1,000 fine) for first offenses, and a felony (up to 10 years in prison and sex offender registration) for repeated violations (three or more images within six months). The law applies to both real images and AI-generated content, with exemptions for criminal investigations and public exposure.
SB 387 updates the definition of "eligible student" for Oklahoma's STEM Intern Partnership Program, expanding eligibility to include students enrolled in technology center schools under the State Board of Career and Technology Education - previously limited to university students. This change directly affects tech center students and organizations seeking to hire them for industry internships through the Oklahoma Center for the Advancement of Science and Technology (OCAST). The bill requires applicant organizations to secure 50% non-state funding for projects and ensures internships provide real-world tech experience with measurable outcomes. It becomes effective November 1, 2025, after passing the legislature and receiving gubernatorial approval in May 2025.
HB 1275 requires social media platforms meeting its definition (e.g., those using algorithms, infinite scrolling, and enabling public social interaction) to verify users are at least 18 years old before granting access. It specifically affects platforms used by Oklahoma residents, excluding email services, gaming platforms, educational tools, and professional networking sites. Key mechanisms include using state-approved digital ID verification and prohibiting "dark patterns" that trick users into sharing age data. The bill explicitly states it does not restrict content or minors' ability to post content on platforms they legally access, focusing solely on age verification for platform access.
