The Arkansas Digital Responsibility, Safety, and Trust Act introduces a new chapter to the Arkansas Code focused on enhancing personal privacy protections in the digital landscape. This legislation emphasizes the importance of privacy as a fundamental right and addresses the risks associated with the collection and dissemination of personal information, particularly in the context of advancing technologies like artificial intelligence and smart devices. Key provisions include definitions of terms related to privacy and data protection, requirements for organizations to implement reasonable measures to safeguard personal data, and the necessity for clear consent from individuals regarding data processing.
The bill also establishes consumer rights concerning personal data, allowing individuals to request access, correction, deletion, and opt-out options for targeted advertising. It mandates that businesses retain records of deletion requests and prohibits the use of retained data for other purposes. Additionally, the legislation outlines responsibilities for both data controllers and processors, including the need for contracts that specify data processing procedures and the implementation of reasonable security practices. The Attorney General is granted enforcement authority to oversee compliance, with violations classified as unfair and deceptive practices subject to penalties. Overall, the Act aims to strengthen consumer privacy rights while ensuring accountability for businesses handling personal data.