{"data":{"id":"us-ok/okla.-stat.-tit.-24-24-163","jurisdiction":"us-ok","citation":"Okla. Stat. tit. 24, § 24-163","heading":"Duty to provide notice of breach","body":"A. An individual or entity that owns or licenses computerized\n\ndata that includes personal information shall provide notice of any\n\nbreach of the security of the system following determination or\n\nnotification of the breach of the security of the system to any\n\nresident of this state whose unencrypted and unredacted personal\n\ninformation was or is reasonably believed to have been accessed and\n\nacquired by an unauthorized person and that causes, or the\n\nindividual or entity reasonably believes has caused or will cause,\n\nidentity theft or other fraud to any resident of this state. Except\n\nas provided in subsection D of this section or in order to take any\n\nmeasures necessary to determine the scope of the breach and to\n\nrestore the reasonable integrity of the system, the disclosure shall\n\nbe made without unreasonable delay.\n\nB. An individual or entity shall provide notice of the breach\n\nof the security of the system if encrypted or redacted information\n\nis accessed and acquired in an unencrypted or unredacted form or if\n\nthe security breach involves a person with access to the encryption\n\nkey and the individual or entity reasonably believes that such\n\nbreach has caused or will cause identity theft or other fraud to any\n\nresident of this state.\n\nC. An individual or entity that maintains computerized data\n\nthat includes personal information that the individual or entity\n\ndoes not own or license shall provide notice to the owner or\n\nlicensee of the information of any breach of the security of the\n\nsystem as soon as practicable following determination, if the\n\npersonal information was or if the entity reasonably believes it was\n\naccessed and acquired by an unauthorized person.\n\nD. Notice required by this section may be delayed if a law\n\nenforcement agency determines and advises the individual or entity\n\nthat the notice will impede a criminal or civil investigation or\n\nhomeland or national security. Notice required by this section must\n\nbe made without unreasonable delay after the law enforcement agency\n\ndetermines that notification will no longer impede the investigation\n\nor jeopardize national or homeland security.\n\nE. 1. An individual or entity required to provide notice in\n\naccordance with subsection A or B of this section shall also provide\n\nnotice to the Attorney General of such breach without unreasonable\n\ndelay but in no event more than sixty (60) days after providing\n\nnotice to impacted residents of this state as required by this\n\nsection. The notice shall include the date of the breach, the date\n\nof its determination, the nature of the breach, the type of personal\n\ninformation exposed, the number of residents of this state affected,\n\nthe estimated monetary impact of the breach to the extent such\n\nimpact can be determined, and any reasonable safeguards the entity\n\nemploys.\n\n2. A breach of a security system where fewer than five hundred\n\n(500) residents of this state are affected within a single breach\n\nshall be exempt from the notice requirements of paragraph 1 of this\n\nsubsection.\n\n3. A breach of a security system maintained by a credit bureau\n\nwhere fewer than one thousand (1,000) residents of this state are\n\naffected within a single breach shall be exempt from the notice\n\nrequirements of paragraph 1 of this subsection.\n\nF. Any personal information submitted to the Attorney General\n\nshall be kept confidential pursuant to Section 24A.12 of Title 51 of\n\nthe Oklahoma Statutes.","path":["OK Code","Title 24"],"source_url":"https://www.oklegislature.gov/OK_Statutes/CompleteTitles/os24.pdf","current_through":"2026-08-14","vintage":"open-us-law v2026.08, retrieved 2026-09-14","retrieved_at":"2026-09-14T18:32:36Z","sha256":"b1c77896bea223666318099e7c537f909564676de49998de8c92a487f64ff320","source_id":"us-ok","stale":false,"prev":"us-ok/okla.-stat.-tit.-24-24-162","next":"us-ok/okla.-stat.-tit.-24-24-164"},"notice":"GroundRules: Original legal text. Not legal advice."}