Law note · Oklahoma
Oklahoma Consumer Data Privacy Act, consumer rights
SB 546 Secs. 2-4 give an Oklahoma consumer the right to confirm and access their personal data, correct inaccuracies, delete data, obtain a portable copy in a digital format, and opt out of targeted advertising, the sale of personal data, and profiling that produces a legal or similarly significant effect.
A controller must respond within 45 days of a request, extendable once by 45 more days with notice to the consumer, must fulfill a request free of charge up to twice annually, and may charge a fee for a manifestly unfounded, excessive, or repetitive request only if the controller bears the burden of showing the request is such. A declined request may be appealed through a process the Act requires the controller to establish.
What it asks of an app
- Give an Oklahoma consumer a means to confirm whether you process their personal data, access it, correct it, delete it, and receive a portable copy in a digital format.
- Offer an Oklahoma consumer an opt-out of targeted advertising, the sale of personal data, and profiling that produces a legal or similarly significant effect.
- Respond to a consumer rights request within 45 days, with one 45-day extension available, and fulfill the first two requests each year free of charge.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach, high_risk_decisions
Primary source: official Oklahoma enrolled bill text, Senate Bill 546, 60th Legislature (2026 Regular Session)