Privacy Law and Privacy Regulations

Oklahoma becomes the 21st state to enact comprehensive consumer data privacy legislation with the Oklahoma Consumer Data Privacy Act, effective January 1, 2027. The law grants Oklahoma residents new rights over their personal data while imposing affirmative obligations on businesses that collect and process consumer information.

The FTC's newly published 2026-2030 Strategic Plan reveals the agency's enforcement priorities for the coming years, with a primary focus on consumer protection through privacy and data security measures. With only two commissioners currently in place, the plan outlines key program areas including fighting deception, addressing unlawful privacy conduct, holding BigTech accountable for harm to children, protecting workers, and combating unfair ticket sales practices.

A California federal court has ruled that a website's privacy policy, even when presented as a passive hyperlink, can defeat delayed discovery claims and render wiretapping lawsuits time-barred.