HB1691 Summary: Information Practices Act of 2015

• Creates the "Information Practices Act of 2015" establishing privacy protections and individual rights to access government records about themselves held by state agencies (excluding General Assembly, courts, and Governor).

• Requires state agencies to maintain personal information only if relevant and necessary to agency purposes, collect information directly from individuals when possible, and maintain accurate records with proper source documentation.

• Grants individuals the right to inspect, copy, amend, and challenge personal information maintained about them, with agencies required to respond within 30-60 days and establish procedures for dispute resolution.

• Establishes data breach notification requirements for agencies owning or maintaining computerized personal information, requiring notification to affected Arkansas residents in the most expedient time possible without unreasonable delay.

• Creates civil causes of action against agencies for violations with potential damages including attorney's fees and mental suffering damages; establishes criminal penalties for false pretenses in obtaining records and prohibits selling or distributing individuals' names and addresses for commercial purposes.