21 CAR Part 51 — Independent Vendor Data Audit Process

Chapter VI

Subchapter A

Subpart 1

21 CAR § 51-101 Title

21 CAR § 51-101. Title.

This part shall be known as the Independent Vendor Data Audit Process, 21 CAR pt. 51.

History

• History: Ark. R. 2026-121 (eff. September 19, 2026) Authority: Arkansas Code § 21-5-425

21 CAR § 51-102 Purpose

21 CAR § 51-102. Purpose.

The purpose of this part is to implement the requirement for an independent audit process to verify the accuracy of data provided by vendors as required by Acts 2025, No. 956.

History

• History: Ark. R. 2026-121 (eff. September 19, 2026) Authority: Arkansas Code § 21-5-425

21 CAR § 51-103 Definitions

21 CAR § 51-103. Definitions.

As used in this part:

(1) “EBD” means the Employee Benefits Division; and

(2) “IAP” means a comprehensive independent audit process to verify the accuracy of data provided by vendors to the division.

History

• History: Ark. R. 2026-121 (eff. September 19, 2026) Authority: Arkansas Code § 21-5-425

21 CAR § 51-104 Contract requirements

21 CAR § 51-104. Contract requirements.

(a) A vendor contracting with the Employee Benefits Division where a fiscal impact is required shall agree to verify the accuracy of all data provided to the state.

(b) All vendors contracting with the division must agree to an IAP as a condition of the contract award.

(c) The division shall not contract with any vendor that refuses to submit to an IAP for data verification purposes.

History

• History: Ark. R. 2026-121 (eff. September 19, 2026) Authority: Arkansas Code § 21-5-425

21 CAR § 51-105 Independent audit process

21 CAR § 51-105. Independent audit process.

(a) The Director of the Employee Benefits Division shall implement the requirement of an IAP to verify the accuracy of vendor-provided data.

(b) The director may request any vendor to submit an IAP at any time during the contract period.

History

• History: Ark. R. 2026-121 (eff. September 19, 2026) Authority: Arkansas Code § 21-5-425

21 CAR § 51-106 Penalties for inaccurate data

21 CAR § 51-106. Penalties for inaccurate data.

(a) A vendor that is found through an IAP to have provided inaccurate data shall be subject to civil penalties as required by law, including Acts 2025, No. 956.

(b) A vendor providing inaccurate data may also face loss of licensure or authorization to operate in this state.

History

• History: Ark. R. 2026-121 (eff. September 19, 2026) Authority: Arkansas Code § 21-5-425