Timing of Consumer Notification
Most expedient time possible and without unreasonable delay.
Method of Notice
Written notice or email if complies with E-SIGN.
Breach Definition
Unauthorized acquisition of computerized data that compromises security, confidentiality, or integrity of personal information maintained by a person or business.
PII Definition

Individual's first name or first initial and last name in combination with any of these if not encrypted or redacted:

  1. Social Security number;
  2. Driver's license number or Arkansas identification card number;
  3. Account number, credit card number, or debit card number in combination with any required security code, access code, or password that would permit access to an individual's financial account; and
  4. Medical information.
Third Party Notice
If data owner maintains covered information for someone else, it must notify them immediately following discovery of breach.
How to Notify
No specific content requirement.
Substitute Notice
All: 1. Email when person or business has an email address for the subject persons; 2. Conspicuous posting of notice on website of person or business if person or business maintains website; and 3. Notification by statewide media.
Credit Monitoring
Not required.
When to Notify Credit Agencies
Not required.
This State's Law
State Government Agency Notification Required
Not required.