Oklahoma § 24-165 - Enforcement – Civil penalty limitation

Full text of Oklahoma Oklahoma Statutes § 24-165 — Enforcement – Civil penalty limitation, with citation guidance and answers to common questions.

§ 24-165. Enforcement – Civil penalty limitation

A. A violation of the Security Breach Notification Act that

results in injury or loss to residents of this state may be enforced

by the Attorney General or a district attorney in the same manner as

an unlawful practice under the Oklahoma Consumer Protection Act.

B. Except as provided in subsection D of this section, the

Attorney General or a district attorney shall have exclusive

authority to bring an action and may obtain actual damages for a

violation of the Security Breach Notification Act and a civil

penalty not to exceed One Hundred Fifty Thousand Dollars

($150,000.00) per breach of the security of the system or series of

breaches of a similar nature that are determined in a single

investigation. Civil penalties shall be based upon the magnitude of

the breach, the extent to which the behavior of the individual or

entity contributed to the breach, and any failure to provide the

notice required by Section 163 of this title.

C. 1. An individual or entity that uses reasonable safeguards

and provides notice as required by Section 163 or 164 of this title

shall not be subject to civil penalties and may use such compliance

Oklahoma Statutes - Title 24. Debtor and Creditor

as an affirmative defense in a civil action filed under the Security

Breach Notification Act.

2. An individual or entity that fails to use reasonable

safeguards but provides notice as required by Section 163 or 164 of

this title shall not be subject to the civil penalty set forth in

subsection B of this section but shall be subject to actual damages

and a civil penalty of Seventy-five Thousand Dollars ($75,000.00).

D. A violation of the Security Breach Notification Act by a

state-chartered or state-licensed financial institution shall be

enforceable exclusively by the primary state regulator of the

financial institution.

Added by Laws 2008, c. 86, § 5, eff. Nov. 1, 2008. Amended by Laws

2025, c. 406, § 4, eff. Jan. 1, 2026.

Source: official Oklahoma text · Last verified 2026-08-27

Frequently Asked Questions About Oklahoma § 24-165

What does Oklahoma Statutes § 24-165 cover?

Section 24-165 ("Enforcement – Civil penalty limitation") is part of the Oklahoma Statutes, the codified statutory law of Oklahoma. It sets out the legal rule or procedure described in the text above. Statutes are amended regularly, so always verify against the official source.

How do I cite Oklahoma § 24-165?

A common citation format is "Oklahoma Statutes § 24-165" (Oklahoma). Legal writing may require the code abbreviation, section number, and year or edition. Match the style required by your court, professor, or publisher.

Is this the official text of Oklahoma law?

No. This page is for research and education and may not include the most recent amendments. For official current law, check the Oklahoma official source linked on this page or consult a licensed Oklahoma attorney.

How does Oklahoma § 24-165 apply to my situation?

Statutes are interpreted in context, and application depends on your specific facts. Only a licensed attorney in Oklahoma can advise on how this section applies to you. Contact your state or local bar association for a referral.

Sources & Verification

Not legal advice. Verify against the official source and consult a licensed attorney in Oklahoma.