A. As used in this section, “state data” means all data files hosted, procured, owned, processed, secured, stored, or created by this state or its state agencies, while in the course of state business and shall include any and all data not otherwise prohibited from such classification or required to be kept confidential by state or federal law. Such data shall be the property of this state unless prohibited by law.

B. While this state is the owner of state data, individual state agencies shall comply with their respective statutory obligations in managing state data including responding to open records requests, reporting and responding to data breaches, and any other statutory obligations required when hosting, accessing, storing, collecting, or processing state data.

C. The Chief Information Officer for the State of Oklahoma may establish standards and criteria for sharing state data between state agencies. Agency requests to share state data shall be denied if the stated purpose does not meet the established standards and criteria for sharing state data as established by the CIO. State agencies may decline requests to share state data if the state data requested is otherwise privileged, required to be kept confidential, or prohibited from being shared by state or federal law.

D. The powers provided in this section shall be in addition to and not in substitution for any powers provided to the Office of Management and Enterprise Services or the Chief Information Officer by rule or law.

E. No powers provided in this section shall exempt or supersede a state agency's statutory responsibility to protect data and to comply with requirements of the Oklahoma Open Records Act¹ or applicable state or federal law.

F. The provisions of this section shall not be applicable to the judicial department of state government or any entity organized within the judicial department and shall not be applicable to the legislative department or any entity organized within the legislative department.