The Oklahoma Computer Data Privacy Act, House Bill 1602 was co-authored by a republican and a democrat law maker and has gathered broad bipartisan support. As drafted, the bill would be the first “opt-in” legislation in the US and would require certain companies to obtain an explicit prior consent before the collection and selling of consumer data.

The bill also provides for data subject rights similar to the CCPA, such as the right to request the data about the resident that was collected and the right to request deletion of that data. The bill also provides that the Oklahoma Corporation Commission would enforce the law, not the Attorney General as in many other states.

In addition, the bill provides for a private right of action for Oklahoma residents to be able to seek injunctive relief, actual damages and statutory damages of up to $7,500 for intentional violations.