July 2022: Iowa House Passes Consumer Data Privacy Bill

Update Applicable to:
All businesses that retain consumer information in the state of Iowa.

What happened?
On March 14, 2022, the Iowa House voted 91-2 to pass House File 2506. Prior to passing the bill, the House adopted Amendment H-8157, which generally aligns the Iowa bill with the recently passed Utah Consumer Privacy Act (UCPA), with a few exceptions.

What are the details?
The Iowa bill would use the same general terminology and framework as the Virginia Consumer Data Protection Act (VCDPA) and Colorado Privacy Act (CPA) but is far more business-friendly. Below are some of the key points of the update:

• Applicability
• Consumer Rights
• Sensitive Data
• Privacy Notice
• Data Processing Agreements
• Enforcement

Once the bill has been passed, it will go into effect on January 1, 2024.

For more information, please see the links below:

House File 2506

Article

What do employers need to do?
Employers should review the information provided above and be on the lookout for any updates or possible amendments to this law.