OK HB3547

Establishes that personally identifiable educational data of minor children is the property of parents until the student turns 18, with state agencies acting only as custodians; prohibits selling, trading, or licensing student data for commercial purposes

Grants parents rights to obtain complete records of their child's data within 30 days, request corrections or deletions, opt out of nonessential data collection, and opt out of research studies, predictive analytics, or AI training datasets

Prohibits collection of political/religious beliefs, family income beyond lunch eligibility, biometric/health data unrelated to special education, and social media identifiers without written parental consent; requires legislative approval for new data elements

Requires the State Department of Education to create a Data Transparency Portal listing all collected data elements, vendor contracts, data-sharing agreements, breach reports within 30 days, and annual security audits

Establishes civil penalties up to $10,000 per violation, criminal misdemeanor charges with up to 1 year imprisonment and $1,000 fine for intentional violations, and allows parents to bring private lawsuits for damages; effective November 1, 2026