Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Data Privacy topic
No spam. Unsubscribe anytime.
Committee advances comprehensive data-privacy bill for businesses operating in Oklahoma
Summary
House Bill 1012, presented by Leader West, would create a consumer data-privacy framework for businesses doing business in Oklahoma and meeting revenue or data thresholds. The committee gave the bill a 7–1 do-pass recommendation; the sponsor said he will not run the bill on the floor this year.
The House Government Modernization and Technology Committee unanimously moved House Bill 1012 forward on a 7–1 vote after Leader West presented a comprehensive data-privacy proposal aimed at limiting commercial collection and sale of consumer information.
Leader West told the committee the bill applies to businesses operating in Oklahoma that collect consumer private information and meet one of these thresholds: gross annual revenue of $15,000,000 or more; collection of private information from 50,000 or more households or devices; or deriving 25% or more of annual revenue from selling consumers’ private information. He said the measure exempts entities covered by HIPAA, the Fair Credit Reporting Act and the Gramm-Leach-Bliley Act and that enforcement would be handled by the Office of the Attorney General.
Leader West walked members through the bill’s consumer rights and business obligations. The bill requires businesses to provide at least two methods for consumers to submit requests (email, mail, text or phone), to respond within 45 days (with a limited extension option), and to disclose categories of data collected, sources of the data, recipients of transferred data and the right to request deletion, including data held by processors. The sponsor said businesses must implement “reasonable security measures” but the bill does not mandate specific technologies such as encryption or ban facial recognition.
Leader West framed the bill as part of a multiyear effort. He said Oklahoma has been studying data privacy since 2019 and noted about 20 states have enacted comprehensive data-privacy laws; he described the sector as a large, unregulated industry and urged legislative action. He also told the committee he would not bring the bill to the full House floor this year, saying there is room for continued negotiation: “If this passes the committee, I won't strike title... This bill will not be on the floor this year.”
Committee members did not debate the bill at length; staff opened the vote and the committee recorded a 7–1 do-pass recommendation. The attorney general’s consumer-protection division was identified in committee remarks as the proposed enforcement arm.
The committee’s recommendation advances the measure for future legislative consideration.
