OKLAHOMA CONSUMER DATA PRIVACY ACT · EFFECTIVE JAN 1, 2027

OCDPA readiness for hotels.

Enforced at the wire, not just on paper.

Subject-rights intake with the 45-day clock, data mapping and ROPA, consent records, and an immutable audit ledger — plus an inline appliance that blocks trackers and keeps guest data on the property. Delivered by your MSP under their brand.

DataStop provides network-level technical controls that support OCDPA readiness. Full compliance also requires organizational and policy measures beyond the platform.

45-day response · one 45-day extension · 60-day appeals · AG enforcement up to $7,500 per violation
DataStop DS-1 inline privacy-controls appliance
DATASTOP DS-1Post-switch, pre-controllerFail-to-wire bypass

For MSPs

Intake and tracking for every OCDPA consumer right: access, correct, delete, portability, opt-out
Evidence your auditor can verify: SHA-256-chained ledger, ROPA, on-premise enforcement
Sold and supported by your MSP — white-label, with SIEM savings on the same appliance

For Properties

Network-level privacy enforcement at the wire
Guest WiFi performance protected at peak load
Tamper-evident audit trail for OCDPA evidence requests
Supports OCDPA readiness (Jan 2027)Built for hospitality guest WiFiWorks alongside existing controllersHardware + cloud hybrid

70%

Of SIEM Savings Kept by MSP

paid only when savings are real

$450

Compliance Margin / Property / Mo

retail $1,200 · wholesale $750

50%

Log Volume Reduction

at the wire, pre-ingestion

No Touch

Compliance-Relevant Logs

PCI-DSS / OCDPA / HIPAA records are never reduced

SB 546 · THE LAW IN ONE SCREEN

What the Oklahoma Consumer Data Privacy Act requires of a hotel.

Effective January 1, 2027. Applies to businesses that control or process personal data of 100,000+ Oklahoma consumers a year — or 25,000+ if more than half of revenue comes from selling data. A 200-room hotel with WiFi, loyalty and a PMS clears the first threshold fast.

45 days

to respond to a consumer request, one 45-day extension with notice

60 days

to decide a consumer's appeal, in writing, after a denial

30 days

cure period after the Attorney General's written notice

$7,500

civil penalty per violation, plus state fees — AG enforcement only

Confirm & access

Guests can ask whether you process their data and get a copy.

Correct

Fix inaccurate personal data on request.

Delete

Erase personal data the guest provided or you obtained about them.

Portability

Provide data in a portable, usable format.

Opt out

Of targeted advertising, sale of personal data, and significant-decision profiling.

Controller duties

Data minimization, reasonable security, a privacy notice, and contracts with every processor.

Summary of SB 546 for orientation only — not legal advice. Confirm applicability with counsel.

READINESS CHECKLIST

Every requirement, mapped to the control that supports it.

Where DataStop already covers a requirement, we say so. Where it's on the roadmap, we say that too.

Receive and track consumer requests; respond within 45 days
Subject Rights module — branded intake page, verification, 45-day clock, one 45-day extension
LIVE
Verify the consumer's identity before fulfilling
Email magic-link plus optional reservation match; staff in-person verification
LIVE
Know what personal data you hold, where, and with which vendors
Data Mapping — PMS, POS, WiFi, locks, CCTV, loyalty templates; generates the ROPA
LIVE
Keep evidence of compliance actions
Append-only SHA-256-chained audit ledger across every request, change and report
LIVE
Honor opt-outs of targeted advertising and tracking
Privacy Passport preferences enforced at the DNS/edge layer — trackers and ACR blocked on the wire
LIVE
Data minimization and reasonable security
Inline appliance reduces and encrypts at the edge; guest payloads never leave the property
LIVE
Written appeal decision within 60 days of a denial
Appeals workflow on denied requests with its own clock
NEXT
Publish an accessible privacy notice
Per-property Trust Center with practices, ROPA summary and request form
NEXT
Contracts with processors; vendor oversight
Vendor Risk register built from the Data Map, with DPA tracking
ROADMAP
Data protection assessments for higher-risk processing
Assessment templates with scoring and version history
ROADMAP

FOR MSPS · WHITE LABEL

Deliver OCDPA readiness to your hotels under your own brand.

Set your name, logo, colors, support contact, and custom domain once. It propagates to every property portal, guest privacy-request page, DSAR email, and readiness report. Hide “Powered by DataStop” entirely if you want.

  • Custom domain (privacy.yourmsp.com) via one CNAME
  • Per-MSP branding applied to all properties instantly
  • “Powered by DataStop” on/off toggle
  • Every branding change recorded in the audit ledger
NorthStar Privacy

Open DSARs

3

Consent Records

1,204

Trackers Blocked

48.2K

DSR-261014-D2 · Delete request

Maria L. · verified by email · PMS, WiFi searched

38d left

Powered-by hidden · your brand only

COMPLIANCE MODULES

The core privacy-platform modules — built for hotels, sold by you.

Modules modeled on enterprise CMPs, scoped to the systems a property actually runs: PMS, POS, WiFi, locks, cameras, loyalty.

Subject Rights (DSAR)

LIVE

Branded guest intake page, email magic-link + reservation verification, 45-day OCDPA clock with one 45-day extension, systems-searched checklist, every step in the immutable ledger. Appeals workflow: next.

Consent & Preference Hub

LIVE

Privacy Passport — the guest's portable privacy profile, auto-enforced at every property on the network. Consent events logged with DNS-level proof of enforcement.

Wire-Level Enforcement

LIVE

Inline DS-1 / Lanner appliance blocks ACR, trackers, and ISP injection at the edge; AI-agent inventory; hardware fail-to-wire bypass. The part no software CMP has.

Data Mapping & ROPA

NEXT

Per-property inventory of PMS, POS, WiFi, locks, CCTV, and vendors with data categories and retention — generates the Record of Processing Activities.

Trust Center

NEXT

Public, branded privacy page per property: data practices, DSAR form, consent choices, and an on-premise enforcement attestation badge.

Assessments & Vendor Risk

ROADMAP

DPIA / OCDPA gap-assessment templates with version history, plus a vendor register with risk scoring for hospitality SaaS and OT suppliers.

PAPERWORK + WIRE

Software CMPs document privacy. DataStop enforces it.

A cookie banner can't stop a smart TV from phoning home. An inline appliance can.

Enforcement layer
CMPBrowser script tag — nothing for IoT, TVs, or captive WiFi
DataStopInline appliance at the core→controller link + guest-facing pages
Pre-consent tracking
CMPTrackers can fire before the banner script loads
DataStopDNS-level block at the edge, before the request leaves the property
Audit evidence
CMPEditable cloud records
DataStopAppend-only SHA-256-chained ledger, exportable
Data residency
CMPCloud-hosted consent and request data
DataStopReduction and enforcement on-premise; attestation that guest data stayed in the building
MSP economics
CMPClient pays the vendor; MSP gets a referral fee at best
DataStopWholesale $750/mo, you set retail · plus 70% of incremental SIEM savings

Most Tools Cost You Money

DataStop pays you

Two revenue streams.
One white-label platform.

You already trim SIEM volume at the collector. DataStop reduces at the wire — before data leaves the property — and shares only the savings beyond what you achieve today. Then it hands you an OCDPA readiness platform to resell.

1

SIEM Reduction Share

ALL PROPERTIES · DS-1 OR LANNER

Typical Per-Hotel SIEM Cost$3K–$5K/mo
Gross Reducible Volume~50%
Already Achieved In-House20–30%
Incremental Savings DataStop Unlocks$800–$1.5K/mo
Your Share70%
New Revenue / Hotel$560–$1,050/mo

No license. No subscription. DataStop takes 30% of incremental savings — and nothing if there are none.

2

Readiness Platform Resale

ENTERPRISE HOSPITALITY · LANNER TIER

DataStop Wholesale$750/mo
Suggested Retail$1,200/mo
Your Margin / Property$450/mo
You Set the PriceYes
Plus SIEM Share on Same Site70%
OCDPA Enforcement DateJan 2027

Network-level OCDPA controls, immutable audit ledger, Privacy Passport, and AI-agent inventory — sold under your brand.

ENTERPRISE TIER

Lanner NCA-4035

1U rackmount privacy-controls appliance for convention hotels, large chains, and OCDPA-regulated properties. 10 Gbps+ bidirectional throughput with DPDK kernel bypass.

Intel Xeon D-2700 (10/20 cores)
4x 10G SFP+ (25G SFP28 by SKU)
2 hardware bypass pairs
DPDK kernel bypass
IPMI remote management
Up to 256GB DDR4-3200
$1,500 – $2,500per appliance

Your Revenue

Readiness Platform Resale$750 wholesale · you set retail
SIEM Savings Split70% MSP / 30% DataStop
Property GetsNetwork-level OCDPA readiness + WiFi stability

SMB TIER

RockChip RK3588S

Compact, fanless edge gateway for boutique hotels, limited-service properties, and regional chains. Same privacy-controls engine, MSP-friendly economics.

ARM Cortex-A76/A55 (8 cores)
2.5 GbE dual-port bridge
GPIO hardware bypass relay
15W TDP — fanless
Compact shelf-mount
8GB LPDDR4X + NVMe
$150 – $300per appliance

Your Revenue

Platform FeeNone
SIEM Savings Split70% MSP / 30% DataStop
Property GetsWiFi stability + SIEM hygiene at zero cost

Both tiers run identical edge software and pay you 70% of incremental SIEM savings. The Lanner tier adds the compliance platform you resell to enterprise hospitality at your own margin.

FOR MANAGED SERVICE PROVIDERS

You control the installation.
You own both revenue lines.

SIEM Revenue Share

DataStop takes 30% of the incremental SIEM savings it creates beyond what you already achieve in-house. Unlock $20K/month, keep $14K. No licensing fees, no subscriptions — we only get paid when you do.

Compliance Resale Margin

Resell the OCDPA readiness platform to enterprise hotels under your brand. Wholesale $750/mo, suggested retail $1,200/mo — you set the price and keep every dollar of markup.

Zero-Touch Provisioning

Provision a new property in 60 seconds. Generate credentials, select hardware tier, export firmware — all from the MSP portal.

Safe Reduction, Proven

Correlation keys preserved per SIEM, fail-open on anything ambiguous, immutable SHA-256 audit ledger. Reduction your SOC can trust — not a pile of regexes.

Dual Hardware Strategy

Lanner NCA-4035 carries the compliance platform for large regulated properties. DS-1 handles SIEM reduction for boutique hotels. One platform, two tiers, two revenue lines.

Revenue Dashboard

See live and projected earnings per property, both streams, in the MSP portal — alongside multi-property monitoring, firmware export, and AI-agent inventory.

WHAT THE PROPERTY GETS

The pitch that gets you
into the network closet

Properties allow the hardware upgrade because it solves their problems too.

1

Guest WiFi Stability

Traffic shaping eliminates buffering during peak hours. Fewer complaints, better reviews, higher occupancy.

2

OCDPA Readiness

Automated privacy controls, consent audit trails, and regulatory reporting that support your OCDPA program.

3

Privacy Passport

A free guest amenity — guests create a portable privacy profile that auto-enforces their preferences at every DataStop property. No account, no cost.

4

IoT Noise Reduction

Smart TV telemetry, HVAC chatter, and IoT heartbeats no longer compete with guest bandwidth.

5

Zero Cost to Property

MSP owns and manages the hardware. Property gets the benefits with zero capex and zero operational burden.

Ready to see what your portfolio earns?

RUN YOUR NUMBERS

MSP Revenue Calculator

Both streams. Honest about what you already reduce in-house.

10
12550
$4,000/mo
$1KSMB $3K–$5K$15K+
20%
0%Typical 20–30%45%
3
010

SIEM Share (70%)

$8,400

of $12,000 incremental

Compliance Resale

$1,350

3 × $450 margin

New Monthly Revenue

$9,750

both streams

New Annual Revenue

$117,000

payback 1 mo on hardware

SIEM: SMB hotels $3K–$5K/mo · Tribal/Casino $60K–$150K+/mo · Compliance: wholesale $750, suggested retail $1,200

Get your full revenue breakdown

Per-property math, both streams, hardware payback — sent to your inbox.

10 properties · $9,750/mo · No spam, no resale of your data.

Ready to turn your SIEM bill into a revenue line?

Access the DataStop portal to explore the MSP revenue dashboard, run the full simulator, or provision your first module.

Featured on StartupWiki