Arkansas data privacy and data broker removal

Arkansas has a comprehensive privacy law that gives you the right to access, delete, and control your personal data. Here is how those rights work in practice, and how to get yourself off data brokers.

Your rights in Arkansas

Arkansas residents are protected by the Arkansas Personal Data Protection Act (APDPA).

• Right to access and know. Request a copy of the personal information a company holds about you.
• Right to correct. Request corrections to inaccurate personal information.
• Right to delete. Ask a company to delete your personal information.
• Right to data portability. Get your data in a portable format you can take to another service.
• Right to opt out of sale. Tell a company to stop selling your personal information.
• Right to opt out of targeted advertising. Stop companies from targeting you with ads based on your personal data.
• Right to opt out of profiling. Stop companies from building a behavioral profile about you.
• Right to appeal. Challenge a company's decision to deny your privacy request.

Does this cover the company that has my data?

Most companies that collect or sell personal data in Arkansas are likely covered. The APDPA applies to a business operating in Arkansas, or targeting Arkansas residents, that in a calendar year either controls or processes the personal data of 25,000 or more consumers, or makes more than half its gross revenue from selling personal data while handling the data of 10,000 or more consumers.

The law exempts HIPAA-covered entities, financial institutions covered by the Gramm-Leach-Bliley Act, nonprofits, higher-education institutions, and data governed by FERPA.

How to remove yourself from data brokers in Arkansas

Your state law gives you the right to request deletion, but exercising it across every site that holds your data takes real effort. Here are the most effective steps, in order.

1. Enable Global Privacy Control

Global Privacy Control is a free browser setting that automatically tells every website you visit not to sell or share your data. It takes two minutes to enable and works silently in the background on every site. Arkansas does not mandate it yet, but most major companies honor it voluntarily because they must comply with California's law anyway.

2. Submit direct opt-out requests

For companies that don't act on the GPC signal, you can submit requests directly. Look for the "Do not sell my personal information" link in each company's website footer; most major brokers have one. You can also submit formal access, deletion, or correction requests through each company's privacy policy page.

Under Arkansas's law, covered companies must respond within the deadline the statute sets. If they don't, you have grounds to file a complaint with the Arkansas Attorney General.

3. Automate ongoing removal

Here is the part nobody tells you: even after you complete every step above, brokers re-ingest your information from public records, data-sharing networks, and commercial databases. Within a few months, your profiles reappear. Staying off these sites is not a one-time task; it is ongoing work that most people cannot keep up manually.

Arkansas's data broker law: what it means for you

Arkansas does not have a dedicated data-broker registry. Many national data brokers are registered in California and honor opt-out requests from residents of any state, but without an Arkansas-specific law requiring it, you have limited recourse if a broker ignores your request. Delist handles these requests across sites in one place, then follows up when a broker doesn't respond.

Other privacy protections in Arkansas

Beyond the comprehensive privacy law, Arkansas has additional protections that may apply to you:

• ACTOPPA (HB 1717 / Act 952, effective July 1, 2026) extends COPPA-style protections to teens aged 13–16.
• Breach notification under the Arkansas Personal Information Protection Act (Ark. Code Ann. § 4-110-101 et seq.).
• An Address Confidentiality Program for survivors of domestic violence, administered by the Arkansas Department of Finance and Administration.

How to file a privacy complaint in Arkansas

Arkansas Attorney General, Public Protection Division: https://arkansasag.gov/divisions/public-protection/

Most state agencies enforce privacy laws in the aggregate: they investigate patterns of violations rather than resolving individual disputes. Filing a complaint still matters, because it creates a record that helps trigger enforcement action.

Frequently asked questions

Sources

• kukie.io
• recordinglaw.com
• dataguidance.com