Resources / AI Laws by State / Oklahoma
Privacy law with profiling rules
Oklahoma AI and Privacy Laws
Oklahoma has no broad AI law.
What the law says
The Oklahoma Consumer Data Privacy Act, signed March 20, 2026 and effective January 1, 2027, applies to businesses that process data of 100,000 or more Oklahomans, or 25,000 with over half of revenue from data sales, and requires data protection assessments for profiling that poses a foreseeable risk of harm.
The Responsible Technology in Schools Act, effective July 1, 2026, requires educator-directed AI use in public schools, bars AI as the primary basis for grading or discipline, gives parents an opt-out, and requires district AI policies before the 2027–28 school year.
Key dates
| Date | What takes effect | Status |
|---|---|---|
| Responsible Technology in Schools Act | In effect | |
| Oklahoma Consumer Data Privacy Act | Upcoming |
What this means for your organization
The main obligations here come from the state’s consumer privacy law. If you use personal data for profiling or automated decisions, review your privacy notice, opt-out and appeal processes, and data protection assessments.
Our 2027 AI Governance Checklist covers the steps most organizations need, and our State AI Law Trackers explain the rules for specific industries.
Other states in this category
See every state on the AI Laws by State map.
This page is general information for planning purposes. Laws and guidance change, so confirm current requirements before acting. It is not legal advice. For legal advice about your organization, consult a licensed attorney.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.