United States: Privacy

Data location is no longer the whole story. Even where data is stored abroad, U.S. legal authorities tied to provider jurisdiction, access, and control can still create meaningful compelled-access and surveillance risk.

On March 20, 2026, Oklahoma Governor Kevin Stitt signed Senate Bill 546 into law, establishing Oklahoma’s Act Relating to Data Privacy (the “Oklahoma Privacy Law”). Oklahoma becomes the 21st state to enact a comprehensive consumer privacy law, joining a growing patchwork of state-level data protection frameworks in the absence of an omnibus federal privacy law.

CalPrivacy is continuing its focus on digital tracking. In its settlement with PlayOn Sports, there are several hints about CalPrivacy’s concerns. Beyond the $1.1 million civil penalty...