• Privacy Law Update

Iowa Passes Comprehensive Privacy Law: What You Need to Know


In a move that underscores Iowa’s commitment to protecting its citizens’ personal data, the state has passed a comprehensive privacy law that will provide additional safeguards and rights for Iowa residents. With the passage of this law, Iowa becomes the sixth US state to enact a comprehensive privacy law, joining California, Virginia, Colorado, Utah, and Connecticut.

The Iowa Consumer Privacy Act (ICPA) grants Iowa residents certain rights with respect to their personal data, including the right to know what data is being collected about them, the right to have that data deleted, and the right to opt-out of the sale of their data. The law also imposes certain obligations on businesses that collect or process personal data, such as providing notice to Iowa residents about their data collection practices and implementing reasonable security measures to protect that data.

Who Does ICPA Apply To?

The ICPA applies to any business that collects or processes the personal data of Iowa residents and meets certain thresholds including:

  • Processes or controls the personal data of at least 100,000 Iowa residents per year; or
  • Processes or controls the personal data of at least 25,000 Iowa residents and derives at least 50% of its annual revenue from the sale of personal data.

What Should Organizations Do Moving Forward?

The passage of the ICPA underscores the growing trend of states taking action to protect their citizens’ personal data. With data breaches and privacy violations becoming increasingly common, consumers are demanding greater transparency and control over how their data is collected and used. Businesses that fail to comply with these new privacy laws not only risk regulatory action, but also damage to their reputation and consumer trust.

At the same time, businesses that take proactive steps to comply with privacy laws and protect their customers’ data can differentiate themselves in a crowded marketplace and build a reputation for trustworthiness and reliability. By implementing strong data security measures, providing clear and transparent notices about data collection practices, and offering robust privacy options to their customers, businesses can demonstrate their commitment to protecting customer privacy and earn the trust and loyalty of their customers.

Check Out Our Ultimate Guide on
Preference and Consent Management, and the Global Privacy Control!

Download Now