Oklahoma Senate Bill 224 creates the Oklahoma Education and Workforce Efficiency Data System (EDS), a secure platform for state agencies to share de-identified student and workforce data across education and employment systems. It directly affects state agencies like the Oklahoma Department of Education, Workforce Commission, and higher education bodies by enabling data integration for improving educational outcomes and taxpayer return on investment. Key provisions include requiring strict privacy compliance (under FERPA and similar laws), prohibiting collection of sensitive data (religion, medical information), and establishing a Governance Council to oversee data access and vendor selection. The system aims to support evidence-based decisions while ensuring data privacy through formal agreements and anonymization for approved users like researchers.
SB 1083 requires digital asset kiosks (physical terminals for exchanging cryptocurrencies or digital assets for cash) to operate under a money transmitter license in Oklahoma. It mandates kiosk operators to report locations to the Banking Department quarterly, disclose clear warnings about irreversible transactions and scams (including specific fraud alerts), and display risk information like "losses are not recoverable." The law prohibits unlicensed operation, with fines up to $2,000 per violation or jail time, and allows customers harmed by unlicensed kiosks to sue for losses. It directly affects kiosk businesses and users engaging in digital asset transactions at these terminals.
SB 687 creates a rebate program for businesses purchasing equipment to expand broadband services in underserved or unserved areas of Oklahoma. It directs the Oklahoma Broadband Office and Tax Commission to administer the program, requiring equipment to directly enable broadband expansion (not operational costs) and limiting rebates to $42 million total - $31.5 million reserved for low-population-density counties. The Oklahoma Broadband Rebate Revolving Fund will pay approved claims, with payments calculated based on total eligible claims versus available funds. Providers must file claims by specified deadlines, and annual reports will track broadband project impacts without disclosing individual company names.
SB 146 expands mental wellness services provided by Oklahoma's Department of Public Safety to include retirees of public safety personnel (such as police and firefighters), in addition to current employees. It creates a dedicated revolving fund (Section 9102) to finance these services and strengthens privacy protections by prohibiting the sharing of individual mental health data without consent, while allowing aggregate data use for policy improvements (Section 9101). The bill also mandates that all Mental Wellness Division resources operate separately from other department divisions. These changes took effect November 1, 2025, after becoming law without the Governor's signature on May 29, 2025.
HB 2289 creates the Oklahoma Elected Official and Judicial Security and Privacy Act of 2025, requiring state agencies to remove specific personal details - including home addresses, phone numbers, school locations, and children's information - from public records for elected officials, judges, and their immediate families. Agencies must delete such "covered information" within 72 hours of a request and cannot publicly display it. The law also mandates annual reports to the legislature on security spending and data collection methods related to protecting these individuals. It became law without the Governor’s signature on May 28, 2025.
SB 626, the Security Breach Notification Act, requires businesses to notify Oklahomans when specific personal data used to verify identity (like Social Security numbers or account credentials) is compromised in a security breach. This law directly affects businesses and organizations that collect or store such identifying information, including credit bureaus, healthcare providers, and financial institutions. The key provision clarifies that notifications are mandated only when data enabling authentication of an individual is breached, not for all types of data. The law became effective on May 28, 2025, without the Governor's signature.
SB 68 amends Oklahoma's Information Technology Consolidation and Coordination Act to require state agencies to obtain a Memorandum of Understanding (MOU) with the Chief Information Officer (CIO) before hiring IT staff. The MOU must detail specific job roles, qualifications, and the agency's commitment to follow CIO-established security and data integrity standards. Agencies cannot hire IT personnel until the CIO and the agency fully execute the MOU, and the CIO may audit compliance with the agreement. This emergency law became effective immediately without the Governor's signature on May 26, 2025.
HB 1124 modifies Oklahoma's Statewide Recovery Fund to specify that funds from the federal American Rescue Plan Act (specifically sections for coronavirus capital projects and state/local recovery funds) will be directed to this fund, excluding money designated for local governments. It clarifies that all interest earned on these deposits will also be added to the fund. The bill ensures these funds are available for broadband-related projects without requiring new appropriations. It takes effect November 1, 2025, and became law without the governor's signature on May 12, 2025.
HB 2158 updates Oklahoma's motor vehicle licensing rules for car dealers and related entities. It prohibits manufacturers (factories) from directly engaging in dealership operations, clarifies who qualifies as a "new motor vehicle dealer," and requires dealer management system providers to meet new data security standards. The bill also modifies procedures for license revocation or suspension and updates definitions for terms like "manufacturer" and "distributor." These changes directly affect car dealers, manufacturers, and businesses managing dealer data systems.
HB 1364 prohibits the nonconsensual sharing of AI-generated sexual images or real images of someone in a sexual act or showing intimate body parts without their consent. It defines "artificially generated sexual depiction" as images created using AI or photo editing that appear authentic but did not occur in reality. Violating this law is a misdemeanor (up to 1 year in jail or $1,000 fine) for first offenses, and a felony (up to 10 years in prison and sex offender registration) for repeated violations (three or more images within six months). The law applies to both real images and AI-generated content, with exemptions for criminal investigations and public exposure.
