Senate Bill: 1167
Arkansas Code: §4-110-101 et seq.
Effective Date: August 12, 2005
Definition of Personal Information: An individual’s first name, or first initial and his or her last name in combination with any one (1) or more of the following data elements, when either the name or the data element is not encrypted or redacted:
(a) Social security number;
(b) Driver's license number or Arkansas identification card number;
(c) Account number, credit card number, or debit card number in combination with any required security code, access code, or password that would permit access to an individual's financial account; and
(d) Medical information;
Summary: A person or business shall take all reasonable steps to destroy or arrange for the destruction of a customer's records within its custody or control containing personal information which is no longer to be retained by the person or business by shredding, erasing, or otherwise modifying the personal information in the records to make it unreadable or undecipherable through any means. A person or business that acquires, owns, or licenses personal information about an Arkansas resident shall implement and maintain reasonable security procedures and practices appropriate to the nature of the information to protect the personal information from unauthorized access, destruction, use, modification, or disclosure.
Visit the state Web site