On March 20, 2026, Oklahoma Governor Kevin Stitt signed into law Enrolled Senate Bill No. 546, a comprehensive privacy law that will go into effect on January 1, 2027—this makes Oklahoma the 21st state to enact a comprehensive privacy law. The bill follows the common model used in many state privacy statutes: it grants
Oklahoma
Out-of-State Sony TV Users Can’t Sue Under California Privacy Laws
A recent ruling from the U.S. District Court for the Northern District of California underscores the limits of state privacy statutes, particularly when plaintiffs reside outside the state and the alleged misconduct lacks a clear connection to California. The decision by Judge Jacqueline Scott Corley dismissed a proposed class action against California-based analytics company Samba…
Biometric Data Collection Leads to Class Action Lawsuit under Illinois Privacy Law
Candid Color Systems Inc., based in Oklahoma, faces a class action lawsuit for its alleged violations of the Illinois Biometric Information Privacy Act (BIPA). Candid Colors offers marketing services to photographers, including photo-matching technology that allows consumers to identify all of the photos taken of a particular student at a graduation ceremony.
The complaint, filed…
Nineteen States Have Banned TikTok on Government-Issued Devices
Governors of numerous states have issued Executive Orders in the past several weeks banning TikTok from government-issued devices and many have already implemented a ban, with others considering similar measures. There is also bi-partisan support of a ban in the Senate, which unanimously approved a bill last week that would ban the app from devices…
At Least 22 States Have Consumer Privacy Legislation Pending – Will 2022 Be the Year for More State Privacy Laws?
California is the gold standard for state privacy laws, having recently enacted the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). Virginia and Colorado also have enacted comprehensive privacy laws, which will take effect in 2023. Recently, the International Association of Privacy Professionals (IAPP) released its state privacy legislation tracker.…
Tulsa, OK Refuses to Pay Ransom to Attackers
The City of Tulsa, Oklahoma, announced on May 9, 2021, that it had been hit with a ransomware attack, but the Mayor is resolute in not paying the demanded ransom. Although “all of our computer systems—with a few exceptions—are down right now,” the Mayor has stated that he will “not pay a nickel” to the…
Autonomous Bots as Personal Delivery Devices in Oklahoma
Governor Kevin Stitt signed a law in Oklahoma this week allowing small autonomous vehicles to operate on sidewalks and crosswalks (and on roadways in certain cases – maybe a pedestrian is in its path or there’s a hazard on the sidewalk). This law is aimed at encouraging autonomous vehicle delivery service companies to set up…
On the Border Restaurant Suffers Data Breach
Last week, the Tex-Mex restaurant chain On the Border suffered a data breach that impacted its payment acceptance systems in 27 states. The restaurant says that some credit card information of customers who visited the chain between April and August 2019 may have been compromised. In a press release, On the Border representatives said, “Our…
Ten Drone Test Sites Expand States’ Regulatory Role
At test sites in 10 states –Alaska, California, Florida, Nevada, North Dakota, North Carolina, Kansas, Oklahoma, Virginia and Tennessee – the U.S. Department of Transportation (DOT) granted local-backed drone projects special licenses to test new ways of flying. At these test sites, drone package delivery and nighttime flights will be conducted, which are typically prohibited…
Oklahoma State Hack Compromises Half a Million Records
Oklahoma State University Center for Health Sciences (OSUCHS) has notified 279,865 patients that their protected health information may have been compromised as a result of a hacking incident.
OSUCHS has determined that an unauthorized individual gained access to its system housing Medicaid billing information on November 7, 2017, but it is unable to determine whether…