AR HB1717

Creates the Arkansas Children and Teens' Online Privacy Protection Act, effective July 1, 2026, protecting children (12 and under) and teens (ages 13-16) from online data collection by commercial website and app operators

Prohibits operators from collecting personal information from children or teens for targeted advertising purposes, and limits data retention to what is reasonably necessary to fulfill requested services

Requires operators to provide clear notice of data collection practices, obtain parental consent for children and parental or teen consent for teens, and offer mechanisms to delete accounts, correct inaccurate information, and access collected data

Defines personal information broadly to include names, addresses, phone numbers, Social Security numbers, geolocation data, biometric identifiers (fingerprints, facial templates, DNA), and any unique identifiers linked to a child or teen

Grants the Attorney General exclusive enforcement authority with power to seek injunctions, damages, restitution, and other relief; explicitly excludes any private right of action for violations