Answer: B - Arkansas law calls on a person or business to “take all reasonable steps to destroy or arrange for the destruction of customer’s records within its custody or control containing personal information that is no longer to be retained by the person or business:
The state’s applicable consumer protection laws include: Title 4 Business and Commercial Law / Subtitle 7 Consumer Protection, Ark. Code § 4-110-103 and Ark. Code § 4-110-104.
These state laws also require “a person or business that acquires, owns, or licenses personal information about an Arkansas resident shall implement and maintain reasonable security procedures and practices appropriate to the nature of the information to protect the personal information from unauthorized access, destruction, use, modification, or disclosure.”
