# Ark. Code Ann. § 6-18-2605: School service contract provider - Data transparency > Arkansas · Statutes · In force URL: https://www.frixlaw.com/law-library/statutes/STATE_AR_T6_C18_S26_S6-18-2605 ## Section - **Citation:** Ark. Code Ann. § 6-18-2605 - **Heading:** School service contract provider - Data transparency - **Jurisdiction:** Arkansas - **Kind:** Statutes - **Status:** In force - **Text as of:** August 14, 2026 - **Source:** Compiled text - **Location:** AR Code / Title 6 / Chapter 18 / Subchapter 26 / Section 6-18-2605 ## Text (a) (1) Each school service contract provider shall provide clear information that is understandable by a layperson explaining: (A) The elements of student personally identifiable information that the school service contract provider collects; (B) The purpose for which the school service contract provider collects the student personally identifiable information; and (C) How the school service contract provider uses and shares the student personally identifiable information. (2) The information required under subdivision (a)(1) of this section shall include all student personally identifiable information that the school service contract provider collects regardless of whether it is initially collected or ultimately held individually or in the aggregate. (3) A school service contract provider shall: (A) Provide the information required under subdivision (a)(1) of this section to each public education entity that the school service contract provider contracts with in a format that is easily accessible; and (B) Update the information required under subdivision (a)(1) of this section as necessary to maintain accuracy. (b) A school service contract provider shall: (1) Provide clear notice to each public education entity that it contracts with before making material changes to its privacy policy for school services that would result in a material reduction in the level of privacy and security provided for student personally identifiable information; and (2) Facilitate access to and the correction of any factually inaccurate student personally identifiable information by a contracting local education agency in response to a request for correction that the local education agency receives and to which the local education agency responds. (c) Upon discovering the misuse or unauthorized release of student personally identifiable information held by a school service contract provider, a subcontractor of a school service contract provider, or a subsequent subcontractor of a school service contract provider, the school service contract provider shall notify the contracting public education entity as soon as possible, regardless of whether the misuse or unauthorized release is a result of a material breach of the terms of a contract. Added by Act 2023, No. 754,§ 1, eff. 6/1/2024. (a) (1) Each school service contract provider shall provide clear information that is understandable by a layperson explaining: (A) The elements of student personally identifiable information that the school service contract provider collects; (B) The purpose for which the school service contract provider collects the student personally identifiable information; and (C) How the school service contract provider uses and shares the student personally identifiable information. (2) The information required under subdivision (a)(1) of this section shall include all student personally identifiable information that the school service contract provider collects regardless of whether it is initially collected or ultimately held individually or in the aggregate. (3) A school service contract provider shall: (A) Provide the information required under subdivision (a)(1) of this section to each public education entity that the school service contract provider contracts with in a format that is easily accessible; and (B) Update the information required under subdivision (a)(1) of this section as necessary to maintain accuracy. ndividually or in the aggregate. (3) A school service contract provider shall: (A) Provide the information required under subdivision (a)(1) of this section to each public education entity that the school service contract provider contracts with in a format that is easily accessible; and (B) Update the information required under subdivision (a)(1) of this section as necessary to maintain accuracy. (1) Each school service contract provider shall provide clear information that is understandable by a layperson explaining: (A) The elements of student personally identifiable information that the school service contract provider collects; (B) The purpose for which the school service contract provider collects the student personally identifiable information; and (C) How the school service contract provider uses and shares the student personally identifiable information. (A) The elements of student personally identifiable information that the school service contract provider collects; (B) The purpose for which the school service contract provider collects the student personally identifiable information; and (C) How the school service contract provider uses and shares the student personally identifiable information. (2) The information required under subdivision (a)(1) of this section shall include all student personally identifiable information that the school service contract provider collects regardless of whether it is initially collected or ultimately held individually or in the aggregate. (3) A school service contract provider shall: (A) Provide the information required under subdivision (a)(1) of this section to each public education entity that the school service contract provider contracts with in a format that is easily accessible; and (B) Update the information required under subdivision (a)(1) of this section as necessary to maintain accuracy. (A) Provide the information required under subdivision (a)(1) of this section to each public education entity that the school service contract provider contracts with in a format that is easily accessible; and (B) Update the information required under subdivision (a)(1) of this section as necessary to maintain accuracy. (b) A school service contract provider shall: (1) Provide clear notice to each public education entity that it contracts with before making material changes to its privacy policy for school services that would result in a material reduction in the level of privacy and security provided for student personally identifiable information; and (2) Facilitate access to and the correction of any factually inaccurate student personally identifiable information by a contracting local education agency in response to a request for correction that the local education agency receives and to which the local education agency responds. (1) Provide clear notice to each public education entity that it contracts with before making material changes to its privacy policy for school services that would result in a material reduction in the level of privacy and security provided for student personally identifiable information; and (2) Facilitate access to and the correction of any factually inaccurate student personally identifiable information by a contracting local education agency in response to a request for correction that the local education agency receives and to which the local education agency responds. (c) Upon discovering the misuse or unauthorized release of student personally identifiable information held by a school service contract provider, a subcontractor of a school service contract provider, or a subsequent subcontractor of a school service contract provider, the school service contract provider shall notify the contracting public education entity as soon as possible, regardless of whether the misuse or unauthorized release is a result of a material breach of the terms of a contract. Added by Act 2023, No. 754,§ 1, eff. 6/1/2024. ## Nearby sections - [Ark. Code Ann. § 6-18-2601 Title](https://www.frixlaw.com/law-library/statutes/STATE_AR_T6_C18_S26_S6-18-2601.md) - [Ark. Code Ann. § 6-18-2602 Purpose](https://www.frixlaw.com/law-library/statutes/STATE_AR_T6_C18_S26_S6-18-2602.md) - [Ark. Code Ann. § 6-18-2603 Definitions](https://www.frixlaw.com/law-library/statutes/STATE_AR_T6_C18_S26_S6-18-2603.md) - [Ark. Code Ann. § 6-18-2604 Local education agency - Vendor security and transparency](https://www.frixlaw.com/law-library/statutes/STATE_AR_T6_C18_S26_S6-18-2604.md) - [Ark. Code Ann. § 6-18-2605 School service contract provider - Data transparency](https://www.frixlaw.com/law-library/statutes/STATE_AR_T6_C18_S26_S6-18-2605.md) - [Ark. Code Ann. § 6-18-2606 School service contract provider - Use of data](https://www.frixlaw.com/law-library/statutes/STATE_AR_T6_C18_S26_S6-18-2606.md) - [Ark. Code Ann. § 6-18-2607 School service contract provider - Data security and destruction](https://www.frixlaw.com/law-library/statutes/STATE_AR_T6_C18_S26_S6-18-2607.md) - [Ark. Code Ann. § 6-18-2608 Exceptions - Applicability](https://www.frixlaw.com/law-library/statutes/STATE_AR_T6_C18_S26_S6-18-2608.md) --- Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/STATE_AR_T6_C18_S26_S6-18-2605. Check the current official text before relying on it. Not legal advice.