Oklahoma OMES Information Services provides accessibility standards for state agencies aligned with Section 508 and WCAG guidelines.
Oklahoma Accessibility & Privacy Laws
Oklahoma does not currently have a comprehensive consumer privacy law. However, the state has data breach notification requirements under the Oklahoma Computer Crimes Act and the Security Breach Notification Act. Oklahoma's Office of Management and Enterprise Services (OMES) provides accessibility guidance for state government digital services.
Accessibility Standards
Privacy Status
Oklahoma has data breach notification requirements but no comprehensive consumer privacy legislation at this time.
Privacy Law Status
Oklahoma has not enacted comprehensive consumer privacy legislation. The state has focused on data breach notification and specific sector protections:
Current Privacy Protections
- Security Breach Notification: Requires notification when personal information is compromised (24 O.S. ยง 163)
- Computer Crimes Act: Criminal penalties for unauthorized access to computer systems
- Consumer Protection: The Consumer Protection Act prohibits deceptive trade practices
- Student Data: The Student Data Accessibility, Transparency, and Accountability Act protects student information
Data Breach Notification Requirements
| Requirement | Details |
|---|---|
| Notification Trigger | Unauthorized acquisition of unencrypted and unredacted personal information |
| Covered Information | Name plus SSN, driver's license, state ID, or financial account information |
| Notification Timeline | Without unreasonable delay |
| AG Notification | State residents notification required; no specific AG threshold specified |
| Substitute Notice | Available for breaches affecting more than 100,000 residents |
Oklahoma State Government Accessibility
Oklahoma's Office of Management and Enterprise Services (OMES) Information Services division provides accessibility guidance for state government websites and applications. State agencies must ensure digital accessibility under ADA Title II requirements.
Covered Entities
- Oklahoma state government agencies
- State boards and commissions
- Oklahoma State Regents for Higher Education
- State contractors and IT vendors
- Local government entities
- Public school districts
Accessibility Standards
- WCAG 2.0 Level AA compliance recommended
- Section 508 alignment for federally-funded programs
- OMES accessibility guidelines for state websites
- Alternative formats available upon request
- Accessibility considerations in technology procurement
Student Data Privacy
Oklahoma's Student Data Accessibility, Transparency, and Accountability Act provides specific protections for student information:
- Limitations on collection and use of student data
- Parental access rights to student information
- Restrictions on sharing student data with third parties
- Requirements for data security and destruction
- Transparency requirements for data practices
Business Obligations
- Implement reasonable security measures
- Notify consumers of data breaches
- Properly dispose of personal information
- Avoid deceptive privacy practices
- Comply with student data requirements (educational entities)
Key Agencies
- Oklahoma Attorney General
- Office of Management and Enterprise Services (OMES)
- Oklahoma Department of Consumer Credit
- Human Rights Commission
- State Department of Education (student data)
Consumer Rights
Oklahoma consumers have the following rights under existing law:
- Breach Notification: Right to be notified of data breaches affecting personal information
- Security Freeze: Right to place a security freeze on credit reports
- Consumer Protection: Protection against unfair and deceptive practices
- Open Records: Access to government records under the Oklahoma Open Records Act
- Student Data: Parents have access rights to student information
Related Resources
- US Privacy Laws Overview
- State Privacy Law Comparison
- Business Privacy Obligations
- ADA Title II Requirements
- All State Laws
- Contact Us
Need Compliance Guidance?
While Oklahoma lacks comprehensive privacy legislation, businesses must still comply with data breach notification requirements and accessibility standards. Contact our experts for guidance on current obligations and preparing for potential future regulations.