Changeflow GovPing Government General Security Breach Notification Act - Class Action...
Priority review Rule Added Final

Security Breach Notification Act - Class Action Liability

Favicon for changeflow.com Oklahoma Legislative Events
Published March 17th, 2026
Detected April 7th, 2026
Email

Summary

Oklahoma enacted SB1716, the Security Breach Notification Act, establishing new requirements for private entities responding to cybersecurity events. The law prohibits class action liability for private entities related to cybersecurity events, subject to specified exceptions. The bill passed the Senate 45-1 and the House Civil Judiciary Committee 5-1 before passage.

What changed

Oklahoma enacted SB1716, the Security Breach Notification Act, which establishes requirements for private entities responding to cybersecurity events. The legislation explicitly limits class action liability for private entities involved in cybersecurity incidents, with certain exceptions outlined in the law. This creates a significant change in the state's legal landscape around data breach response, providing both compliance obligations and liability protections.

For businesses and organizations operating in Oklahoma, this law directly affects how they must handle data breach notifications and the potential for class action litigation following cybersecurity events. Private entities must understand both their notification obligations under the act and the scope of liability protection it provides. The bill received strong bipartisan support through both chambers, indicating broad legislative consensus on this cybersecurity framework.

What to do next

  1. Review data breach notification procedures for Oklahoma compliance
  2. Assess class action liability protections and exceptions under SB1716
  3. Update incident response policies to align with new state requirements

Source document (simplified)

ChangeBridge / Oklahoma / SB1716 Passed SB1716 Senate Bill Passed 2026-03-17

Security Breach Notification Act; prohibiting class action liability for private entity for cybersecurity event; providing exceptions. Effective date.

Bill Details

State Oklahoma

Session 2026 Regular Session

Chamber Senate

Official Source www.oklegislature.gov/BillInfo.aspx?Bill=s...

LegiScan View on LegiScan

Sponsors

Brent Howard (Sen - R) Josh West (Rep - R) Emily Gise (Rep - R)

Action History

2026-04-06 H Policy recommendation to the Judiciary and Public Safety Oversight committee; Do Pass, amended by committee substitute Civil Judiciary 2026-03-30 H Referred to Civil Judiciary 2026-03-30 H Second Reading referred to Judiciary and Public Safety Oversight 2026-03-24 H Remove Representative Gise as principal House author and substitute with Representative West (Josh) 2026-03-17 H First Reading 2026-03-17 S Engrossed to House 2026-03-16 S Referred for engrossment 2026-03-16 S Measure passed: Ayes: 45 Nays: 1 2026-03-16 S Title stricken 2026-03-16 S General Order, Amended 2026-02-24 S Placed on General Order 2026-02-19 S Reported Do Pass as amended Technology and Telecommunications committee; CR filed 2026-02-11 S Coauthored by Representative Gise (principal House author) 2026-02-03 S Second Reading referred to Technology and Telecommunications 2026-02-02 S Authored by Senator Howard 2026-02-02 S First Reading

Votes

2026-02-19 Senate: Technology & Telecommunications Committee: DO PASS AMENDED Yea: 8 Nay: 0 2026-03-16 Senate: THIRD READING Yea: 45 Nay: 0 2026-04-02 House: Civil Judiciary Committee: DO PASS AS AMENDED BY CS Yea: 5 Nay: 1

Committee Referrals

2026-02-03 S Technology and Telecommunications 2026-03-30 H Judiciary and Public Safety Oversight 2026-03-30 H Civil Judiciary

Amendments

2026-02-18 Senate Committee Committee Amendment 1 2026-04-01 House Committee Proposed Policy Committee Substitute 1 2026-04-06 House Committee Policy Committee Recommendation

Bill Text Versions

2026-01-14 Introduced 2026-02-23 Amended 2026-03-17 Engrossed Legislative data powered by LegiScan (CC BY 4.0)

Named provisions

Security Breach Notification Act Class Action Liability Prohibition Cybersecurity Event Exceptions

Get daily alerts for Oklahoma Legislative Events

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
OK Legislature
Published
March 17th, 2026
Instrument
Rule
Legal weight
Binding
Stage
Final
Change scope
Substantive
Document ID
OK SB1716 (2026)

Who this affects

Applies to
Technology companies Businesses Government agencies
Industry sector
5112 Software & Technology
Activity scope
Data breach notification Cybersecurity incident response Class action litigation
Geographic scope
US-OK US-OK

Taxonomy

Primary area
Data Privacy
Operational domain
Compliance
Topics
Cybersecurity Consumer Protection

Get alerts for this source

We'll email you when Oklahoma Legislative Events publishes new changes.

Optional. Personalizes your daily digest.

Free. Unsubscribe anytime.