# Arkansas Law-Enforcement AI Governance Arkansas AI governance in this corpus has four distinct layers: statutory minimums in Act 848, a produced statewide acceptable-use policy, an ACIN model template, and contract or training materials. They should not be collapsed into one adopted rule set. ## Act 848 minimums Act 848 of 2025 requires a covered public entity to create an AI and automated-decision-tool policy, requires an authorized human employee or designee to make any final decision, and requires employee training on the policy and appropriate AI/ADT use in deciding an outcome. Its public-on-request wording expressly applies to each **state entity's** technology-resources and AI/ADT policies; that text should not be broadened without analysis to every other record of every public entity. The Act also requires specified prohibitions and a disciplinary procedure. (primary public record, [Arkansas Act 848 of 2025](../../web%20archive/2026-08-10/arkleg.state.ar.us/arkansas-act-848-of-2025.md)); (primary public record, [HB 1958 / Act 848 history](../../web%20archive/2026-08-10/arkleg.state.ar.us/hb-1958-act-848-bill-history.md)) ## Broader produced controls - The statewide policy requires approved tools, documented human review, auditability, security, and training and restricts surveillance or profiling without authority (`GOV-202_Arkansas_AI_Acceptable_Use_Policy_Final_2026-02-26.pdf`, pp. 1–4). Those controls come from the produced policy, not all from Act 848. - ACIN's model policy is expressly a template requiring local legal, privacy, procurement, bias, accuracy, retention, and vendor-risk review (`GOV-002_Arkansas_Model_AI_Policy_TEMPLATE.pdf`, pp. 1–2). A template is not proof of agency adoption. - Peregrine's addendum describes AI/ML outputs as decision support subject to human review ([[Peregrine and Carahsoft Executed Contract]], p. 22). That is a contract term, not proof of a completed validation or audit. - The CLEST packet is a prepared training package with blank external-approval fields, not proof of CLEST approval or employee completion. ## Evidence boundary The records establish statutory minimums, stated safeguards, a template, proposed training, and contract language. They do not establish completed system approvals, risk assessments, bias or accuracy tests, audits, training completion, or case-specific compliance.