HB 2293 extends the Oklahoma Broadband Office's operations until December 31, 2030 (previously ending June 30, 2028) and reorganizes it as a division of the Oklahoma Department of Commerce. The bill also extends the Broadband Governing Board and Broadband Expansion Council until 2030, maintaining their roles in overseeing statewide broadband grant programs, the Statewide Broadband Plan, and rural connectivity initiatives. These entities will continue managing federal and state funds for broadband expansion while operating under open-government laws. The changes ensure continuity for existing broadband infrastructure projects and grant programs without altering their core functions.
HB 3380, the "Fostering the Future for Oklahoman Children and Families Act," requires Oklahoma's Department of Human Services (DHS) to modernize child welfare systems within 180 days of its effective date. It mandates improved data collection and transparency, expansion of AI-driven tools for caregiver matching and funding efficiency, and annual public scorecards tracking outcomes like reducing foster care duration and improving child safety. The bill also directs DHS to create a new initiative supporting youth transitioning from foster care through online resource platforms, educational scholarships, and reallocated funding for job training. Additionally, it requires DHS to address religious accommodations for faith-based partners and foster family placements. The law takes effect November 1, 2026.
HB 3176 creates the Oklahoma Gas, Artificial Intelligence, and Space Research Hub (GAS Hub) as the state's central coordinator for recruiting a U.S. National Laboratory. The hub will prepare federal-ready sites, coordinate workforce development, aggregate state incentives, and serve as Oklahoma's formal applicant to agencies like the Department of Energy and NASA. It requires the Oklahoma Department of Commerce to administer the hub, working with state agencies including the Oklahoma Space Industry Development Authority. The bill mandates annual reports on federal engagement and site readiness, with implementation effective November 1, 2026.
HB 3647 creates the "Oklahoma Health Care Transparency Initiative" requiring most licensed health care providers in Oklahoma to submit anonymized claims and enrollment data to a state-designated health information exchange starting July 1, 2026. It establishes an Office within the Oklahoma Health Care Authority to oversee the initiative, with limited exemptions for providers facing financial hardship, small practice size, or technological limitations. The law mandates strict confidentiality and privacy protections for patient data, aligning with federal standards like HIPAA, and prohibits misuse of the collected information. This initiative aims to build a centralized database for health care cost and utilization data, primarily affecting hospitals, clinics, and insurers participating in Oklahoma's health care system.
HB 4132 creates liability protection for Oklahoma counties and municipalities if they adopt specific cybersecurity frameworks (NIST, CIS, or ISO standards) and meet compliance requirements. To qualify, local governments must annually certify compliance, maintain detailed security documentation, and undergo independent cybersecurity reviews every three years. This bill directly affects county and municipal operations by reducing legal risk from data breaches when these steps are followed. It does not change existing cybersecurity practices but provides a legal shield for entities that implement recognized standards. The law takes effect November 1, 2026.
SB 546 establishes data privacy rights for Oklahoma residents by requiring businesses that process personal data (referred to as "controllers") to honor consumer requests about their information. It mandates clear privacy notices, prohibits deceptive "dark patterns" for consent, and gives consumers rights to access, correct, or delete their data. The law excludes health data covered by HIPAA, certain nonprofit organizations, and educational institutions. Businesses must respond to requests within specific timeframes and implement data protection measures, with enforcement by the Attorney General.
HB 2769 amends Oklahoma's military code to update the Oklahoma National Guard's structure and personnel rules. It requires the Adjutant General to have at least 8 years of Oklahoma National Guard service (previously 3 years) and sets their pay at Major General level. The bill creates the Oklahoma National Guard CareerTech Assistance Program, which provides education funding through a revolving fund for eligible Guard members pursuing career-focused training. It also adjusts nonjudicial punishment procedures, clarifies Adjutant General authority, and modifies eligibility for retirement benefits. The law directly affects Oklahoma National Guard members, leadership, and administrative staff.
Oklahoma Senate Bill 224 creates the Oklahoma Education and Workforce Efficiency Data System (EDS), a secure platform for state agencies to share de-identified student and workforce data across education and employment systems. It directly affects state agencies like the Oklahoma Department of Education, Workforce Commission, and higher education bodies by enabling data integration for improving educational outcomes and taxpayer return on investment. Key provisions include requiring strict privacy compliance (under FERPA and similar laws), prohibiting collection of sensitive data (religion, medical information), and establishing a Governance Council to oversee data access and vendor selection. The system aims to support evidence-based decisions while ensuring data privacy through formal agreements and anonymization for approved users like researchers.
HB 2289 creates the Oklahoma Elected Official and Judicial Security and Privacy Act of 2025, requiring state agencies to remove specific personal details - including home addresses, phone numbers, school locations, and children's information - from public records for elected officials, judges, and their immediate families. Agencies must delete such "covered information" within 72 hours of a request and cannot publicly display it. The law also mandates annual reports to the legislature on security spending and data collection methods related to protecting these individuals. It became law without the Governor’s signature on May 28, 2025.
SB 626, the Security Breach Notification Act, requires businesses to notify Oklahomans when specific personal data used to verify identity (like Social Security numbers or account credentials) is compromised in a security breach. This law directly affects businesses and organizations that collect or store such identifying information, including credit bureaus, healthcare providers, and financial institutions. The key provision clarifies that notifications are mandated only when data enabling authentication of an individual is breached, not for all types of data. The law became effective on May 28, 2025, without the Governor's signature.
