Law / United States / 
Arkansas
Act 848 of 2025 (HB 1958), Public Entity Policy on Authorized Use of Artificial Intelligence
In force since .
An AI governance rule binding government bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Governance, Disclosure
- Audit expectation
- none
What it requires
- If you are an Arkansas public entity, including a public school district, a public school district board of directors, an open-enrollment public charter school, a political subdivision or an institution of higher education, create an artificial intelligence and automated decision tool policy that defines the authorized use of those tools for your entity (Ark. Code Ann. § 25-1-128(b)(3)(A)).
- Write the policy so that it requires an authorized human employee or designee to make any final decision in the course of his or her employment, regardless of what artificial intelligence or automated decision tool the employee or designee recommends (Ark. Code Ann. § 25-1-128(b)(3)(B)).
- Develop a training program for all of your employees on your artificial intelligence and automated decision tool policy, including training on the appropriate use of those tools in deciding an outcome in the course of an employee’s employment (Ark. Code Ann. § 25-1-128(b)(4)(A)).
- Include in each policy prohibitions on the use of your artificial intelligence and automated decision tools, including that your technology resources not be used to engage in illegal activities or to intentionally override or avoid your security and system integrity procedures (Ark. Code Ann. § 25-1-128(d)).
- Create a disciplinary procedure for a violation of your technology resources and artificial intelligence and automated decision tool policy (Ark. Code Ann. § 25-1-128(e)).
- If you are a state entity, make your artificial intelligence and automated decision tool policy available to the public upon request (Ark. Code Ann. § 25-1-128(c)(1)).
- If you are the Department of Education, develop, in coordination with the State Cybersecurity Office, the artificial intelligence and automated decision tool policies that each type of state educational institution uses, and make them available to the public upon request (Ark. Code Ann. § 25-1-128(c)(2)).
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
Act 848 requires a public entity to adopt an artificial intelligence and automated decision tool policy, a training program and a disciplinary procedure. It imposes no duty to create, keep, or produce a log or record of any kind.
- Kind
- None
- As of
What this law does
Act 848 of 2025 amends Arkansas Code section 25-1-128 to require a public entity to create an artificial intelligence and automated decision tool policy. The Act defines a public entity as an instrumentality funded in whole or in part by taxpayer funds, a term that includes a public school district, a public school district board of directors, an open-enrollment public charter school, a political subdivision of the state and an institution of higher education.
The policy must define the authorized use of artificial intelligence and automated decision tools for the public entity. The policy must also require an authorized human employee or designee to make any final decision in the course of employment, regardless of what artificial intelligence or automated decision tool the employee or designee recommends.
A public entity must develop a training program for all of its employees that covers the artificial intelligence and automated decision tool policy, including the appropriate use of those tools in deciding an outcome in the course of an employee’s employment. A public entity must create a disciplinary procedure for a violation of its technology resources and artificial intelligence and automated decision tool policy.
Each such policy must include prohibitions on the use of the public entity’s artificial intelligence and automated decision tools, including that its technology resources not be used to engage in illegal activities or to intentionally override or avoid its security and system integrity procedures. The policy of each state entity must be available to the public upon request.
The Department of Education, in coordination with the State Cybersecurity Office, must develop the policies that each type of state educational institution uses and make them available to the public upon request. Approved .
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.
Back to the example · Lint your app
Page updated .