{"data":{"id":"us-ok/okla.-stat.-tit.-18-18-2069","jurisdiction":"us-ok","citation":"Okla. Stat. tit. 18, § 18-2069","heading":"Definitions","body":"As used in this act:\n\n1. \"Covered entity\" means any hospital, as defined in Section\n\n1-701 of Title 63 of the Oklahoma Statutes, whether for-profit or\n\nnot-for-profit, which is owned, either in whole in or part, or is\n\nmanaged in whole or in part, by hospitals whose business is subject\n\nto the Health Insurance Portability and Accountability Act of 1996,\n\nPublic Law 104-191;\n\n2. \"Data breach\" means the unauthorized access and acquisition\n\nof unencrypted and unredacted computerized data that compromises the\n\nsecurity or confidentiality of personal information or restricted\n\ninformation maintained by a covered entity as part of a database of\n\npersonal information or restricted information regarding multiple\n\nindividuals and that causes, or the covered entity reasonably\n\nbelieves has caused or will cause, identity theft or other fraud to\n\nany resident of this state. Good-faith acquisition of personal\n\ninformation or restricted information by an employee or agent of a\n\ncovered entity for the purposes of the covered entity is not a\n\nbreach of the security system; provided, that the personal\n\ninformation or restricted information, as the case may be, is not\n\nused for a purpose other than a lawful purpose of the covered entity\n\nor subject to further unauthorized disclosure;\n\n3. \"Personal information\" means the first name or first initial\n\nand last name in combination with and linked to any one or more of\n\nthe following data elements that relate to a resident of this state,\n\nwhen the data elements are neither encrypted nor redacted:\n\na. Social Security number,\n\nb. driver license number or state identification number\n\nissued in lieu of a driver license, or\n\nc. financial account number, or credit or debit card\n\nnumber, in combination with any required security\n\ncode, access code, or password that would permit\n\naccess to the financial accounts of an individual.\n\nThe term does not include information that is lawfully obtained\n\nfrom publicly available information, or from federal, state, or\n\nlocal government records lawfully made available to the public;\n\n4. \"Restricted information\" means any information about an\n\nindividual, other than personal information, that, alone or in\n\ncombination with other information, including personal information,\n\ncan be used to distinguish or trace the individual's identity or\n\nthat is linked or linkable to an individual, if the information is\n\nnot encrypted, redacted, or altered by any method or technology in\n\nsuch a manner that the information is unreadable, and the breach of\n\nwhich is likely to result in a material risk of identity theft or\n\nother fraud to person or property; and\n\n5. \"Encrypted\" and \"redacted\" shall have the same meanings as\n\nin Section 162 of Title 24 of the Oklahoma Statutes.","path":["OK Code","Title 18"],"source_url":"https://www.oklegislature.gov/OK_Statutes/CompleteTitles/os18.pdf","current_through":"2026-08-14","vintage":"open-us-law v2026.08, retrieved 2026-09-14","retrieved_at":"2026-09-14T18:32:36Z","sha256":"e030baa57090a13cca7672026f5ebac11b912adc98d8c4ed3ed34afa9ee41d88","source_id":"us-ok","stale":false,"prev":"us-ok/okla.-stat.-tit.-18-18-2068","next":"us-ok/okla.-stat.-tit.-18-18-2070"},"notice":"GroundRules: Original legal text. Not legal advice."}