SB626

Oklahoma SB626 modifies the Security Breach Notification Act to require notice of security breaches involving unencrypted personal information.

Oklahoma SB626 amends the Security Breach Notification Act to require individuals or entities to notify residents of the state if their unencrypted personal information is breached. The act defines "breach of the security of a system" as unauthorized access and acquisition of unencrypted and unredacted personal information. It mandates notice to the Attorney General if the breach involves unencrypted and unredacted personal information. The act also authorizes the Attorney General to promulgate rules to effectuate the provisions of the act.