Technology (Data Privacy)

SB 1488 establishes a moratorium on building new data centers (defined as facilities with 100+ megawatts of capacity) in Oklahoma until November 1, 2029. The bill requires the Corporation Commission to study data centers' impacts on water supplies, utility rates, nearby property values, and security, and to recommend regulations for grid health, environmental protection, and data privacy. The Commission must submit an electronic report with findings and recommendations to the Legislature before the moratorium ends. This directly affects data center developers and operators seeking to expand in Oklahoma, while delaying new construction to allow for regulatory analysis.

SB 1716 amends Oklahoma's Security Breach Notification Act to limit class action lawsuits against private entities following cybersecurity breaches. It prohibits class action liability unless a breach results from the entity's "willful and wanton conduct or gross negligence." The bill also clarifies that private entities using reasonable safeguards and providing required breach notices cannot be held liable for civil penalties, while those failing to use reasonable safeguards face reduced penalties ($75,000) but not class actions. This directly affects businesses and organizations handling personal data in Oklahoma, shifting enforcement exclusively to the Attorney General or district attorneys for most cases.

SB 1734, the Oklahoma Responsible Technology in Schools Act, restricts AI tool use in public schools to educator-supervised settings, requiring all classroom AI applications to operate under teacher oversight ("human-in-the-loop") with educators reviewing outputs before use in instruction or assessment. It prohibits AI from determining high-stakes outcomes like grading, discipline, or student placement, and mandates school districts to adopt policies by the 2027-2028 school year covering data privacy, appropriate use, and transparency for families. The State Department of Education must develop guidance to help districts comply, while ensuring AI tools meet federal privacy laws (like FERPA) and minimize student data sharing. The bill takes effect July 1, 2026, and does not compel schools to adopt AI but sets guardrails for its responsible use.

Oklahoma's SB 552 bans state agencies that receive federal or state funds from using biotechnology equipment or services from companies designated by the federal government as "biotechnology companies of concern" (entities controlled by foreign adversaries posing national security risks through multiomics data collection). The bill specifically targets the use of multiomics technology - which combines data from genomics, proteomics, and other biological research areas - to prevent potential security threats. State agencies cannot contract with entities using such biotechnology, and the law only takes effect after a comparable federal law is enacted. This directly affects all Oklahoma state agencies managing federal or state funds, requiring them to avoid specific biotech vendors.