Bill > SB258

This bill creates the Arkansas Digital Responsibility, Safety, and Trust Act, a comprehensive privacy and artificial intelligence legislation designed to protect consumers' personal data and regulate the use of high-risk artificial intelligence systems. The bill establishes several key provisions, including requiring controllers (entities that determine the purpose and means of processing personal data) to obtain consumer consent before collecting or selling sensitive data, provide clear privacy notices, and limit data collection to what is necessary. For high-risk artificial intelligence systems, developers and deployers must conduct impact assessments, disclose potential risks of algorithmic discrimination, and provide consumers with specific rights such as the ability to opt out, receive explanations for decisions, and appeal adverse outcomes. The bill applies to businesses that process personal data of Arkansas residents, with exemptions for small businesses and certain types of organizations. The Attorney General will have exclusive enforcement authority, treating violations as unfair and deceptive practices, with potential penalties under existing state law. The legislation is set to take effect in stages between January and October 2026, giving businesses time to prepare for compliance. Notably, the bill does not provide a private right of action, meaning consumers cannot directly sue for violations, but must rely on the Attorney General for enforcement.

Transportation and Infrastructure

https://arkleg.state.ar.us/Bills/Detail?id=sb258&ddBienniumSession=2025%2F2025R