The Arkansas Children and Teens' Online Privacy Protection Act aims to enhance the privacy rights of minors in the digital space by introducing a new subchapter to the Arkansas Code. This legislation defines key terms such as "child," "teen," "operator," and "personal information," and establishes a framework for how online services must handle data related to users aged 16 and younger. The act prohibits operators from collecting personal information from minors for targeted advertising and requires that any data collection be consistent with the service context or mandated by law. Additionally, operators must provide clear notice of their data collection practices and obtain consent from parents or guardians before collecting personal information from teens.

The bill also mandates that operators disclose specific information about their data collection, including the purpose of processing and the rights of parents and teens regarding their personal data. Operators are required to obtain consent for data collection, with exceptions for necessary services or legal compliance. The legislation emphasizes the importance of allowing parents and teens to request deletion of personal information and to challenge its accuracy. Furthermore, it establishes that operators must not require children to disclose more personal information than necessary and must implement reasonable security practices to protect the data. The Attorney General is granted exclusive authority to take civil action against violations, and the act is set to take effect on July 1, 2026.