Almost one year to the day after Utah enacted the Utah Consumer
Privacy Act ("UCPA"), Iowa is one (Kim Reynolds')
signature away from passing the sixth comprehensive consumer data
privacy law, joining California, Colorado, Virginia, Connecticut,
and Utah.
The bill – the "Act relating to consumer data
protection" (available here) – moved fast. Introduced
in the Iowa State Senate on January 23, 2023, the State Senate
passed it unanimously on March 6th and, just nine days
later, the Iowa House of Representatives unanimously passed it on
March 15th.
Iowa's (almost) new privacy law ("Iowa Privacy
Law"), which will become Chapter 715D of the Iowa
Code, is most similar to the UCPA and relatively business-friendly,
with one influential consumer advocacy group opposing the law as "weak".
Following are some FAQs about key features of the Iowa Privacy
Law.
