# Third Agency Rule The **Third Agency Rule**, as ACIN describes it, is an interagency dissemination control: "one participating agency cannot release another agency's information without authorization from the originating agency" ([[ACIN Privacy and Security Overview 2026-05-15]], p. 2). ## How it appears in the corpus - ACIN lists Third Agency Rule protections among its security and privacy measures ([[ACIN Executive Overview 2026-05-15]], p. 2). - The privacy overview ties the rule to its assertion that participating agencies retain ownership and control of contributed data ([[ACIN Privacy and Security Overview 2026-05-15]], p. 2). - The one-page sheet repeats "Third Agency Rule protections" without identifying an underlying policy or legal source ([[ACIN One-Page Fact Sheet]], p. 1). ## Stakeholders - Originating agencies. - Recipient/participating agencies. - [[Arkansas Criminal Intelligence Network]] and its governing board. - Arkansas records custodians responding to requests involving interagency data. ## Notes The first batch does not include the rule's text, adoption authority, exceptions, FOIA procedure, appeal path, or reconciliation with an agency's statutory custody obligations. This page records ACIN's stated rule; it does not treat the phrase itself as a demonstrated Arkansas-law exemption.