SB 626, the Security Breach Notification Act, requires businesses to notify Oklahomans when specific personal data used to verify identity (like Social Security numbers or account credentials) is compromised in a security breach. This law directly affects businesses and organizations that collect or store such identifying information, including credit bureaus, healthcare providers, and financial institutions. The key provision clarifies that notifications are mandated only when data enabling authentication of an individual is breached, not for all types of data. The law became effective on May 28, 2025, without the Governor's signature.
SB 68 amends Oklahoma's Information Technology Consolidation and Coordination Act to require state agencies to obtain a Memorandum of Understanding (MOU) with the Chief Information Officer (CIO) before hiring IT staff. The MOU must detail specific job roles, qualifications, and the agency's commitment to follow CIO-established security and data integrity standards. Agencies cannot hire IT personnel until the CIO and the agency fully execute the MOU, and the CIO may audit compliance with the agreement. This emergency law became effective immediately without the Governor's signature on May 26, 2025.
HB 1547 updates Oklahoma's rules for county agricultural fairs and funding. It allows fair associations to spend funds on digital communication tools (like internet and email) and clarifies that officers must attend at least 50% of meetings to retain their positions. The bill also adds a 12-hour voting window for electing fair association leaders and expands allowable expenses to include transporting exhibits between local and state fairs. Counties can now levy up to 1 mill per $1,000 in property value (or 0.25 mills in larger counties) to fund fair operations, premiums, maintenance, and advertising. These changes directly affect county fair associations, county excise boards, and local governments managing agricultural fairs across Oklahoma.
HB 1124 modifies Oklahoma's Statewide Recovery Fund to specify that funds from the federal American Rescue Plan Act (specifically sections for coronavirus capital projects and state/local recovery funds) will be directed to this fund, excluding money designated for local governments. It clarifies that all interest earned on these deposits will also be added to the fund. The bill ensures these funds are available for broadband-related projects without requiring new appropriations. It takes effect November 1, 2025, and became law without the governor's signature on May 12, 2025.
HB 2158 updates Oklahoma's motor vehicle licensing rules for car dealers and related entities. It prohibits manufacturers (factories) from directly engaging in dealership operations, clarifies who qualifies as a "new motor vehicle dealer," and requires dealer management system providers to meet new data security standards. The bill also modifies procedures for license revocation or suspension and updates definitions for terms like "manufacturer" and "distributor." These changes directly affect car dealers, manufacturers, and businesses managing dealer data systems.
SB 139 requires Oklahoma public school district boards of education to adopt cell phone policies by the 2025-2026 school year. Starting in the 2026-2027 school year, boards may choose to implement policies prohibiting students from using cell phones or personal electronic devices on school campuses "from bell to bell" during school hours. The bill directly affects school districts by setting a timeline for policy adoption and defining the scope of device restrictions during instructional time. This legislation, approved by the governor on May 3, 2025, provides a framework for district-level decisions without mandating specific enforcement.
HB 1364 prohibits the nonconsensual sharing of AI-generated sexual images or real images of someone in a sexual act or showing intimate body parts without their consent. It defines "artificially generated sexual depiction" as images created using AI or photo editing that appear authentic but did not occur in reality. Violating this law is a misdemeanor (up to 1 year in jail or $1,000 fine) for first offenses, and a felony (up to 10 years in prison and sex offender registration) for repeated violations (three or more images within six months). The law applies to both real images and AI-generated content, with exemptions for criminal investigations and public exposure.
SB 387 updates the definition of "eligible student" for Oklahoma's STEM Intern Partnership Program, expanding eligibility to include students enrolled in technology center schools under the State Board of Career and Technology Education - previously limited to university students. This change directly affects tech center students and organizations seeking to hire them for industry internships through the Oklahoma Center for the Advancement of Science and Technology (OCAST). The bill requires applicant organizations to secure 50% non-state funding for projects and ensures internships provide real-world tech experience with measurable outcomes. It becomes effective November 1, 2025, after passing the legislature and receiving gubernatorial approval in May 2025.
HB 1203, the Strategic Bitcoin Reserve Act, would allow Oklahoma's State Treasurer to invest up to 10% of specific state funds (General Fund, Revenue Stabilization Fund, and Constitutional Reserve Fund) in Bitcoin or digital assets with a $500 billion+ market cap, plus approved stablecoins. The bill requires all digital assets to be held through secure custody solutions meeting strict security standards, including multi-party governance and encrypted storage in geographically diverse facilities. It also mandates that taxes paid in Bitcoin be converted to U.S. currency and transferred to the State General Fund, and permits state retirement funds to hold digital assets under similar secure custody rules. The act applies directly to state treasury operations, retirement funds, and tax collection processes. The bill was introduced in 2025 but failed in committee in April 2025.
HB 1346 changes Oklahoma law by replacing the term "child pornography" with "child sexual abuse material" in all relevant statutes. It requires commercial entities (like websites or platforms) to implement "reasonable age verification methods" to prevent minors from accessing harmful online content, and holds these entities liable for civil damages if they knowingly publish or distribute such material. The bill directly affects online platforms and commercial entities hosting content, adding new civil liability standards without creating new criminal penalties. Key provisions define terms like "age verification methods" and "harmful to minors" to clarify enforcement.
