AR HB1514

Adds Arkansas Code § 19-11-107 establishing that data stored by a data company for a public entity is the property of the public entity.

Prohibits data companies from selling, disclosing, or using stored data for any other purpose without express authorization from the public entity, unless the data is considered open or released in the public domain.

Requires data companies to return all data to public entities in a specified format within 30 days of contract expiration or termination, or in a usable format within 60 days if no format is specified in the contract.

Mandates data companies securely destroy remaining data within 6 months of contract expiration or termination and provide a certificate of destruction upon written approval by the public entity.

Allows public entities and data companies to negotiate alternative terms regarding data format, return procedures, and destruction methods that override the statutory requirements.