United States of America: Passed Oklahoma Computer Data Privacy Act of 2022

On 23 March 2022, the House of Representatives of Oklahoma passed the Oklahoma Computer Data Privacy Act of 2022 (HB 2969). The Act applies to businesses active in Oklahoma which have annual revenues above USD 10 million, annually process the personal data of at least 25’000 consumers, or derive at least 50% of annual revenues from sharing consumer personal information. The Act would require businesses to clearly outline their data processing policies to consumers before data collection. Only data that is reasonably necessary for providing requested services, or for security purposes or fraud detection, could be collected. Consumers would have the right to request personal data held about them, and to request its deletion or correction. Data processors would further have to disclose if personal information is shared with third parties or service providers and how long such data is retained.