Law / United States / Oklahoma

SB 546, Oklahoma Consumer Data Privacy Act

Okla. Stat. tit. 75A, section 300 et seq. (2026 Senate Bill 546, Oklahoma Consumer Data Privacy Act)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force in 100 days, effective 1 January 2027.

An age-appropriate design code rule binding private bodies.

As of 15 July 2026.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Comprehensive consumer privacy law whose minor specific protection is that personal data collected from a known child, defined as an individual younger than 13, is sensitive data that a controller may not process without consent and, for a known child, must handle in accordance with COPPA. It contains no separate targeted advertising or sale restriction for minors 13 and older.

Passed the House 84 to 4 on February 19, 2026 and the Senate 38 to 7 on March 16, 2026, and signed by Governor Stitt on March 20, 2026.

If you get it wrong

Private right of actionNo

Penalties

Up to $7,500 per violation, with a mandatory 30 day right to cure

Who enforces it

Enforcement body

Oklahoma Attorney General

What it reaches

Age threshold

13

Covered services

Controllers subject to the Oklahoma Consumer Data Privacy Act processing personal data collected from a known child under 13

When LexLint raises it

  • serves_minors

Read the law

official Oklahoma Legislature bill information page

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example  ·  Lint your app