Oklahoma Enacts New Consumer Privacy Law Effective 2027

• •Oklahoma's SB 546 establishes the OKCDPA, effective January 1, 2027.
• •This law makes Oklahoma the 20th state to adopt a comprehensive consumer privacy law.
• •Businesses operating in Oklahoma must comply with new data privacy regulations.

On March 20, 2026, Oklahoma Governor Kevin Stitt signed SB 546 into law, establishing the Oklahoma Consumer Data Privacy Act (OKCDPA), which will take effect on January 1, 2027. This law applies to businesses that conduct operations in Oklahoma or offer products and services targeted at Oklahoma residents. The OKCDPA marks Oklahoma as the 20th U.S. state to implement a comprehensive consumer privacy law, following Rhode Island's recent legislation. The Act aims to enhance consumer rights regarding personal data and impose obligations on data controllers and processors. It is expected to impact various sectors, including technology and retail, as companies adjust to comply with the new regulations. The law comes amid growing concerns about data privacy and security in the digital age. Stakeholders, including businesses and consumers, are encouraged to prepare for the upcoming changes in data handling practices.