The Arkansas Children and Teens' Online Privacy Protection Act aims to enhance the privacy rights of minors in the digital space by introducing a new subchapter to the Arkansas Code. This legislation defines key terms such as "child," "teen," "operator," and "personal information," and establishes a framework for how online services must handle data related to users aged 16 and younger. It prohibits operators from collecting personal information from minors for targeted advertising and requires that any data collection be consistent with the service context or specifically authorized by law. Operators must also provide clear notice of their data collection practices and obtain consent from parents or guardians before collecting personal information from children or teens.
Additionally, the bill mandates that operators disclose specific information regarding their data practices, including the purpose of data processing and the rights of parents and teens concerning their personal data. It emphasizes the ability for parents and teens to delete personal information, challenge its accuracy, and access collected data. The Attorney General is granted exclusive authority to take civil action against violations of these provisions, and a severability clause ensures that if any part of the act is invalidated, the remaining provisions will still be enforceable. The act is set to take effect on July 1, 2026.