The law applies to controllers or processors that conduct business in Oklahoma or produce products or services targeted to Oklahoma residents and, during a calendar year, either:
-
Control or process personal data of at least 100,000 consumers; or
-
Control or process personal data of at least 25,000 consumers and derive more than 50% of gross revenue from selling personal data.
There is no separate general dollar-revenue threshold. A consumer is an Oklahoma resident acting in an individual or household context, excluding commercial and employment contexts. Specified organizations and categories of information are exempt, so meeting a numerical threshold does not end the applicability analysis.
For operational guidance and structured compliance documentation tools, visit the CLIClaw Privacy Compliance Library.
These FAQs provide general information and operational commentary. They are not legal advice. Applicability and compliance obligations depend on an organization’s activities, data practices, exemptions, and circumstances. It is intended as a starting point for understanding the issues discussed and should not be relied on as a substitute for advice from qualified legal counsel.
These materials were obtained directly from the Federal Government public website and are posted here for your review and reference only. No Claim to Original U.S. Government Works. This may not be the most recent version. The U.S. Government may have more current information. We make no guarantees or warranties about the accuracy or completeness of this information, or the information linked to. Please check the linked sources directly.