Technology; liability protections; counties; municipalities; cybersecurity frameworks; State Auditor and Inspector; effective date.

Summary

The bill shields Oklahoma counties and municipalities from civil damages caused by data breaches if they have adopted and reasonably followed recognized cybersecurity standards such as NIST, CIS, or ISO/IEC 27000. To qualify, they must annually self‑certify compliance, keep detailed security records, and undergo an external audit at least every three years. They may also share summary results with the State Auditor for statewide benchmarking.

AI-generated summary — may be incomplete or inaccurate. Verify against the official bill text.

Topics

Share