Oklahoma § 18-2071 Industry-recognized cybersecurity framework.

Oklahoma Statutes

§ 18-2071 — Industry-recognized cybersecurity framework.

Oklahoma § 18-2071

Title 18Corporations

This text of Oklahoma § 18-2071 (Industry-recognized cybersecurity framework.) is published on Counsel Stack Legal Research, covering Oklahoma primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

Okla. Stat. tit. 18, § 18-2071 (2026).

Text

A covered entity's cybersecurity program, as described in Section 3 of this act, reasonably conforms to an industry-recognized cybersecurity framework for purposes of that section if this section is satisfied: 1. The covered entity is subject to the requirements of the laws or regulations listed below, and the cybersecurity program reasonably conforms to the entirety of the current version of both of the following, subject to paragraph 2 of this section: a. the security requirements of the Health Insurance Portability and Accountability Act of 1996, as set forth in 45 CFR Part 164 Subpart C, and b. the Health Information Technology for Economic and Clinical Health Act, as set forth in 45 CFR Part 162; and 2. When a framework listed in paragraph 1 of this section is amended, a covered entit

Free access — add to your briefcase to read the full text and ask questions with AI

A covered entity's cybersecurity program, as described in Section 3 of this act, reasonably conforms to an industry-recognized cybersecurity framework for purposes of that section if this section is satisfied: 1. The covered entity is subject to the requirements of the laws or regulations listed below, and the cybersecurity program reasonably conforms to the entirety of the current version of both of the following, subject to paragraph 2 of this section: a. the security requirements of the Health Insurance Portability and Accountability Act of 1996, as set forth in 45 CFR Part 164 Subpart C, and b. the Health Information Technology for Economic and Clinical Health Act, as set forth in 45 CFR Part 162; and 2. When a framework listed in paragraph 1 of this section is amended, a covered entity whose cybersecurity program reasonably conforms to that framework shall reasonably conform to the amended framework not later than one (1) year after the effective date of the amended framework.