AR HB2251

Amends Arkansas Code § 4-110-103 to add a formal definition of "encryption" as the transformation of data through algorithmic processes into a form with low probability of meaning without a confidential key, or by another method that renders data completely unreadable or unusable.

Clarifies that data is not considered encrypted if acquired together with any required key, security code, access code, or password that would permit access to the encrypted data.

Renumbers existing definitions in the Personal Information Protection Act to accommodate the new encryption definition, shifting subsequent definitions (individual, medical information, owns or licenses, personal information, records, and state agencies) to higher numbered subsections.

Modifies the "personal information" definition to reference encryption status, clarifying that protected data consists of an individual's name combined with specified data elements such as social security numbers, driver's license numbers, financial account information, or medical information when not encrypted or redacted.