"Personally identifiable information" means any information about an individual maintained by an operator including (1) any information that can be used to distinguish or trace an individual's identity, such as name, social security number, date and place of birth, mother's maiden name, or biometric records; and (2) any other information that is linked or linkable to an individual, such as medical, educational, financial, and employment information.
[] The Commission may determine additional areas that require internal controls having minimum standards. The Commission shall adopt and publish any such additional internal controls and the minimum standards pursuant to the provisions of the Arkansas Administrative Procedures Act and these Rules.
[] Prior to adopting or amending such house rules, an operator shall submit such rules to the Commission for the Commission's approval.
[] Operators shall preserve the records required by this Rule for at least 5 years after they are made. Such records may be stored by electronic means, but must be maintained on the premises of the operator or must otherwise be immediately available for inspection.
Regardless of the date of application or issuance of the license, the fee charged and collected under this section is the full annual fee.
006.06.19 Ark. Code R. § 005