Overview
The Arkansas Personal Information Protection Act (PIPA), codified under Arkansas Code Title 4, Subtitle 7, Chapter 110, is a state privacy and data security law that establishes requirements for the protection of personal information maintained by businesses, individuals, and government entities. The Act requires organizations that own, license, or maintain personal information to implement and maintain reasonable security procedures and practices to safeguard sensitive data from unauthorized access, destruction, use, modification, or disclosure. It also establishes data breach notification obligations, requiring affected individuals to be notified when a security breach compromises personal information. In addition, the law includes provisions relating to the proper disposal of personal records and the protection of consumer information throughout its lifecycle. The Act aims to reduce the risk of identity theft, fraud, and other harms resulting from unauthorized access to personal information.