Duty LXD-1443
Processes biometric data, in Oklahoma
Each law's tag says when it binds: since in force from , in 7 weeks not yet in force
Security Breach Notification Actsince 4 lines
Okla. Stat. tit. 24, Secs. 162-166 · Read the law's page
- Provide notice of a breach of security involving personal information without unreasonable delay.
- If you maintain computerized data that includes personal information you do not own or license, notify the owner or licensee of any breach of the security of the system as soon as practicable following determination of the breach, where the information was or is reasonably believed to have been accessed and acquired by an unauthorized person.
- Notify the Oklahoma Attorney General within 60 days of consumer notice if the breach affects 500 or more Oklahoma residents (1,000 or more for a breach maintained by a credit bureau).
- Do not assume a bare identification use of a recording-derived identifier is covered biometric data under this statute. Its definition is bound to authentication use, not identification generally, and carries no exclusion or clawback clause either way.
Parents' Bill of Rights: parental consent to biometric scans and to blood and DNA records of a minor childsince 2 lines
Parents' Bill of Rights, Okla. Stat. tit. 25, Secs. 2001-2002 · Read the law's page
- If you are the state, a political subdivision, another governmental entity or any other institution, do not make, share or store a biometric scan of a minor child without the parent's written consent (section 2002(A)(7) of Title 25).
- If you are the state, a political subdivision, another governmental entity or any other institution, do not create, store or share any record of a minor child's blood or DNA without the parent's written consent, except as sections 1-516 and 1-524.1 of Title 63 require or a court order authorizes (section 2002(A)(8) of Title 25).
Oklahoma Consumer Data Privacy Act, sensitive data categories and biometric data definitionfrom , in 7 weeks2 lines
Okla. Stat. tit. 75A, Sec. 300(3), (29) · Read the law's page
- Obtain an Oklahoma consumer's opt-in consent before processing sensitive data, including genetic or biometric data collected to uniquely identify the individual.
- Treat a faceprint or voiceprint generated from a photograph, video, or audio recording, for the purpose of identifying a specific individual, as covered biometric and sensitive data. This Act's exclusion does not reach data generated for that purpose.