Duty LXD-0453
Trains models, in Arkansas
Arkansas Personal Information Protection Act, reasonable security proceduressince 1 line
Ark. Code Ann. section 4-110-104(b) · Read the law's page
- Implement and maintain reasonable security procedures and practices appropriate to the nature of the personal information you acquire, own, or license, to protect it from unauthorized access, destruction, use, modification, or disclosure.
- This binds a person or business, a term defined to include a state agency, that acquires, owns, or licenses personal information about an Arkansas resident.
- This duty is separate from the same section's duty to take all reasonable steps to destroy or arrange for destruction of a customer's records containing personal information no longer retained, and from the Act's own breach-notification duty, researched as this jurisdiction's privacy row.
- There is no dedicated regulator or stated penalty amount for a violation of this duty; only the Arkansas Attorney General may bring an enforcement action, under the Arkansas Deceptive Trade Practices Act. Whether that Act's private-suit provision also reaches a violation of this duty has not been confirmed either way; treat it as an open question rather than a cleared risk.
Act 927 of 2025 (HB 1876), Generative AI Ownership of Model Training and Contentsince 4 lines
Ark. Code Ann. ยง 18-4-101 · Read the law's page
- Absent a contrary agreement, if you supply the input or directive to a generative AI tool, you own the content it generates for you, so long as that content does not infringe an existing copyright or other intellectual property right.
- Absent a contrary agreement, if you supply the data or input used to train a generative AI model, you own the resulting trained model, so long as the training data was lawfully acquired and you have not transferred ownership of it by contract.
- If your employee generates content or trains a model with a generative AI tool within the scope of employment and under your direction and control, you as the employer own the resulting content or trained model instead.
- This ownership rule does not extend to content that infringes a pre-existing copyright or other intellectual property right, regardless of AI use.