--- title: Data Breach Notification Laws in Arkansas - SCA Security description: "What are the laws for data breach notification in Arkansas Statute Codes for Breach Notification Laws in Arkansas The Personal Information Protection Act in Arkansas is outlined under Ark. Code § 4-110-101 et seq.: S.B. 1167, act 1526 was signed into law as of March 31, 2005, and became effective August 12, 2005. Legal Requirements" image: https://blog.scasecurity.com/hubfs/Imported_Blog_Media/Arkansas.jpg --- [727-571-1141 Talk to an Expert](tel:727-571-1141) [info@scasecurity.com Email Us](mailto:info@scasecurity.com) [![sca-logo-r](https://blog.scasecurity.com/hs-fs/hubfs/sca-logo-r.png?length=190&name=sca-logo-r.png)](https://scasecurity.com/) ☰ - [Home](https://scasecurity.com/) - [Security](https://scasecurity.com/security/) - [Email Phishing & Employee Training](https://scasecurity.com/anti-phishing-training-with-phished-io/) - [Vulnerability Assessments](https://scasecurity.com/security/vulnerability-assessments/) - [Penetration Testing](https://scasecurity.com/security/penetration-testing/) - [Applications](https://scasecurity.com/security/applications/) - [Controls](https://scasecurity.com/security/controls/) - [Centurion ESO](https://scasecurity.com/executive-security-officer/) - [Consulting](https://scasecurity.com/security/consulting/) - [Risk & Compliance](https://scasecurity.com/compliance/) - [CMMC](https://scasecurity.com/cybersecurity-maturity-model-certification/) - [HITRUST](https://scasecurity.com/hitrust/) - [Federal](https://scasecurity.com/compliance/federal/) - [State](https://scasecurity.com/compliance/state/) - [Industry](https://scasecurity.com/compliance/industry/) - [Cybersecurity Risk Assessment](https://scasecurity.com/security/risk-assessment/) - [NIST Cybersecurity Framework Assessment](https://scasecurity.com/compliance/nist-framework/) - [AI Risk Management Services](https://scasecurity.com/ai-risk-management-services/) - [Governance](https://scasecurity.com/compliance/governance/) - [Industries](https://scasecurity.com/industries/) - [Financial Services](https://scasecurity.com/industries/financial-services/) - [Healthcare](https://scasecurity.com/industries/healthcare/) - [Government/Public Sector](https://scasecurity.com/industries/government-public-sector/) - [Title/Real Estate](https://scasecurity.com/industries/title-real-estate/) - [Technology](https://scasecurity.com/industries/technology/) - [Manufacturing](https://scasecurity.com/industries/manufacturing/) - [Professional Services](https://scasecurity.com/industries/professional-services/) - [Automotive](https://scasecurity.com/automotive/) - [Higher Education](https://scasecurity.com/higher-education/) - News & Resources - [Blog](https://blog.scasecurity.com) - [Events](https://scasecurity.com/event/) - [Case Studies](https://scasecurity.com/case-studies/) - [Recorded Webinars](https://scasecurity.com/recorded-webinars/) - [SCA Breach Notification Guide](https://scasecurity.com/breach-notification-guide/) - [HIPAA Security Audit Checklist](https://info.scasecurity.com/hipaa-audit-checklist) - [Cybersecurity Checklist for Insurance Providers](https://info.scasecurity.com/cybersecurity-checklist-for-insurance-providers) - Company - [About Us](https://scasecurity.com/about-us/) - [Leadership](https://scasecurity.com/leadership/) - [Affiliates](https://scasecurity.com/affiliates/) - [Career Opportunities](https://scasecurity.com/career-opportunities/) - [Testimonials](https://scasecurity.com/testimonials/) - [Contact Us](https://scasecurity.com/contact-us/) #### Menu Home Security › Email Phishing & Employee Training Vulnerability Assessments Penetration Testing Applications Controls Centurion ESO Consulting Risk & Compliance › CMMC HITRUST Federal State Industry Cybersecurity Risk Assessment NIST Cybersecurity Framework Assessment AI Risk Management Services Governance Industries › Financial Services Healthcare Government/Public Sector Title/Real Estate Technology Manufacturing Professional Services Automotive Higher Education News & Resources › Blog Events Case Studies Recorded Webinars SCA Breach Notification Guide HIPAA Security Audit Checklist Cybersecurity Checklist for Insurance Providers Company › About Us Leadership Affiliates Career Opportunities Testimonials Contact Us [727-571-1141 Talk to an Expert](tel:727-571-1141) [info@scasecurity.com Email Us](mailto:info@scasecurity.com) November 15, 2019 # Data Breach Notification Laws in Arkansas By: SCA Editor ![](https://blog.scasecurity.com/hubfs/Imported_Blog_Media/Arkansas.jpg) ## What are the laws for data breach notification in Arkansas ### Statute Codes for Breach Notification Laws in Arkansas The Personal Information Protection Act in Arkansas is outlined under Ark. Code § 4-110-101 et seq.: S.B. 1167, act 1526 was signed into law as of March 31, 2005, and became effective August 12, 2005. ### Legal Requirements for Breach Notification This law pertains to entities (including individuals, businesses or state agencies) that either acquire, own, or license computerized data containing PI. This applies specifically to Arkansas resident data, regardless if the entity is local to Arkansas. An Arkansas security breach is when resident PI data is acquired in an unauthorized way, and not in good faith. The data must in some way compromise integrity, security, or confidentiality of affected parties. PI is defined as a first and last name, including first initials, in combination with other pertinent information. That information can include SSNs, driver’s license and ID numbers, financial data like account numbers, passwords, PINs, or anything else compromising financial activity, or medical information. ### Timeframes for Notification After a Data Breach Occurs When a breach is discovered, an entity must inform affected Arkansas residents as soon as reasonably possible. If an investigation proves no reasonable expectation of harm, notification isn’t necessary. If the entity manages information owned by a third party, that third party must be notified in the event a PI breach occurs–provided it’s feasible an unauthorized individual has acquired this PI. Notice can be given in writing, or by email provided said email outreach follows the E-Sign Act (15 U.S.C § 7001). If it can be demonstrated notification will cost the entity $250,000 or more, or that more than 500,000 people have been impacted by the PI breach, or there isn’t enough contact information to reach affected parties, then substitute notice options can be used. ### Exemptions in Arkansas Entities maintaining notification procedures pertaining to PI breach which are consistent with statute timing will be considered compliant to the statute. This is provided affected persons are properly notified in the event of a breach. ### Contact Security Compliance Associates to Learn More About Data Breach Notification Laws in Arkansas SCA has years of experience helping organizations across the United States to prevent and manage potential data breaches. Contact us today at 727-571-1141 to schedule a no-cost consultation. You can also download our free [Data Breach Response Guide](https://scasecurity.com/data-breach-response-guide/) to learn more about breach notification law in your state. #### Subscribe Email\* Notification Frequency [Data Breach](https://blog.scasecurity.com/tag/data-breach) [September 26, 2024 6 Functions of the NIST Cybersecurity Framework](https://blog.scasecurity.com/nist-security-framework) [September 14, 2023 7 Lessons Learned from the Dish TV Ransomware Attack](https://blog.scasecurity.com/7-lessons-learned-from-the-dish-tv-ransomware-attack) [August 27, 2023 Cybersecurity Consulting: Five Considerations for AI and Privacy Issues](https://blog.scasecurity.com/cybersecurity-consulting-five-considerations-for-ai-and-privacy-issues) ### Comments © 2026 - All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "SCA Editor", "url" : "https://blog.scasecurity.com/author/sca-editor" }, "dateModified" : "2025-04-10T15:35:51.824Z", "datePublished" : "2019-11-15T05:00:00.000Z", "headline" : "Data Breach Notification Laws in Arkansas - SCA Security", "image" : [ "https://blog.scasecurity.com/hubfs/Imported_Blog_Media/Arkansas.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.scasecurity.com/data-breach-notification-laws-in-arkansas", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.scasecurity.com/hubfs/sca-logo-r.png" }, "name" : "Security Compliance Associates" } } ```