The Arkansas Children and Teens Online Privacy Protection Act aims to strengthen the privacy rights of minors by regulating how personal information is collected and used online. The bill introduces a new subchapter to the Arkansas Code, defining essential terms such as "child," "teen," "operator," and "personal information." It sets forth guidelines for operators of websites and online services directed at children, prohibiting the collection of personal information for targeted advertising and requiring clear disclosures about data collection practices. Operators must also obtain verifiable consent from parents or guardians before collecting any personal information from minors and are responsible for the secure retention and transfer of this data.

Furthermore, the legislation outlines specific rights for parents and teens, including the ability to access, delete, or challenge the accuracy of their personal information. Operators are required to implement reasonable security measures to protect this information and cannot terminate services based on a request to delete personal data, as long as the service can function without it. The bill also specifies exceptions to the consent requirement for certain one-time interactions. Violations of these provisions are deemed unfair or deceptive acts under the Deceptive Trade Practices Act, empowering the Attorney General to enforce compliance on behalf of affected individuals.