The Arkansas Children and Teens' Online Privacy Protection Act is designed to enhance the privacy rights of minors by regulating the collection, use, and disclosure of personal information by online services targeting children and teens. The bill introduces a new subchapter to the Arkansas Code, defining key terms such as "child," "teen," "operator," and "personal information." It mandates that operators obtain verifiable consent from parents or legal guardians before collecting personal information from children, and from teens under specific conditions. The act prohibits the collection of personal information for targeted advertising and requires operators to disclose their data collection practices clearly.

Additionally, the bill outlines operators' responsibilities regarding the retention and use of personal information, emphasizing that data should only be kept as long as necessary to fulfill service requests. Operators must provide parents and teens access to their personal information, allow requests for deletion, and enable challenges to its accuracy. The legislation clarifies that verifiable consent is not required in certain situations, such as when collecting online contact information solely to respond to a request. Violations of the act are classified as unfair or deceptive acts under the Deceptive Trade Practices Act, allowing the Attorney General to enforce compliance. The act is set to take effect on July 1, 2026.