Arkansas Healthcare Compliance Requirements

State-specific breach notification rules, medical records retention periods, PDMP requirements, and mandatory reporting obligations for medical practices operating in Arkansas.

Expedient notification10-year retentionPMP AWARxE

Breach Notification Rules

Notification deadline

Most expedient time possible

Notification must be made in the most expedient time and manner possible and without unreasonable delay.

AG notification threshold

All breaches

Notify: AG

Harm analysis required

Yes — breach presumed unless risk assessment shows low probability of compromise

Penalty range

Enforceable by AG under Deceptive Trade Practices Act

Comparable to federal HIPAA
View statute

Medical Records Retention

Record typeRetention periodMeasured from
General medical10 yearsLast treatment

PDMP Requirements — PMP AWARxE

Check required

All controlled substances

Check frequency

Every prescription

Delegation allowed

Yes — authorized staff can check on provider's behalf

Penalty range

Disciplinary action by licensing board; fines up to $10,000

Exemptions

Hospice patients, cancer patients receiving ongoing treatment, ≤14 day supply for surgical procedures, inpatient hospital administration

Mandatory Reporting Obligations

Mandated reporters

Physicians, surgeons, nurses, dentists, dental hygienists, mental health professionals, and all healthcare workers

Report to

Arkansas Child Abuse Hotline, Department of Human Services

Timeline

Immediately / as soon as possible

Penalty for failure

Class C misdemeanor, up to 30 days jail and/or $500 fine; Class B misdemeanor for subsequent offenses

Immunity provision

Good faith reporters immune from civil and criminal liability

Mandated reporters

Physicians, nurses, social workers, and all healthcare professionals

Report to

Adult Protective Services, Department of Human Services

Timeline

Immediately / as soon as possible

Penalty for failure

Class A misdemeanor, up to 1 year jail and/or $2,500 fine

Immunity provision

Good faith reporters immune from civil and criminal liability

Mandated reporters

Healthcare providers treating injuries from suspected criminal activity

Report to

Local law enforcement

Timeline

Immediately / as soon as possible

Immunity provision

Good faith reporters immune from civil liability

Mandated reporters

Physicians, nurses, laboratory personnel, and healthcare facility administrators

Report to

Arkansas Department of Health

Timeline

Within 24 hours

Penalty for failure

Misdemeanor, up to $1,000 fine

Immunity provision

Good faith reporters immune from civil liability

Mandated reporters

All healthcare providers treating gunshot wounds or injuries from criminal violence

Report to

Local law enforcement

Timeline

Immediately / as soon as possible

Penalty for failure

Misdemeanor

Immunity provision

Good faith reporters immune from civil and criminal liability

Stay compliant in Arkansas

GuardWell tracks Arkansas-specific breach deadlines, PDMP requirements, retention periods, and mandatory reporting obligations automatically.

GuardWell

Healthcare Compliance Assistant

Hi! I'm GuardWell's sales assistant.

I can answer questions about our healthcare compliance platform, pricing, and features. How can I help?

Powered by GuardWell AI