Keypoint: Iowa moves one step closer to enacting
consumer data privacy legislation with a bill generally modeled off
the Utah Consumer Privacy Act.
On March 14, 2022, the Utah House voted 91-2 to pass House File 2506. Prior to passing the bill,
the House adopted Amendment H-8157, which generally aligns the Iowa
bill with the recently passed Utah Consumer Privacy Act (UCPA),
with a few exceptions.
As we discussed with the UCPA, the Iowa bill would
use the same general terminology and framework as the Virginia
Consumer Data Protection Act (VCDPA) and Colorado Privacy Act (CPA)
but is far more business friendly.
Below is a brief summary.
Applicability
The bill would apply to persons conducting business in Iowa or
producing products or services that are targeted to state residents
and that, during a calendar year, either (1) control or process the
personal data of 100,000 consumers or (2) control or process the
personal data of at least 25,000 consumers and
