← Global Privacy Laws Research Library
Iowa Code Chapter 715D
Iowa Consumer Data Protection Act
Prepared by Shubhank Suman · Last reviewed
CURRENT / IN FORCE
- Legal character
- Statute
- Region
- North America
What it covers
The chapter applies to persons doing business in Iowa that control or process personal data of at least 100,000 consumers, or of 25,000 consumers while deriving over half of gross revenue from selling personal data. Consumers may confirm processing, access, delete and obtain a copy of their data and opt out of sale. Controllers must limit processing, keep security practices, give notice before processing sensitive data and offer an opt-out, and publish a privacy notice. Processors work under contract. The Attorney General enforces exclusively, after a 90-day cure period, with civil penalties up to $7,500 per violation.
Why it matters
It is Iowa's comprehensive consumer privacy law, among the more business-friendly US State models.
Refer to it when
Use it when processing personal data of Iowa consumers above the thresholds.
AI, privacy and cybersecurity relevance
- AI: Low
- Privacy: Very High
- Cyber: Moderate
AI
LOW RELEVANCE
No AI-specific provisions.
Privacy
VERY HIGH RELEVANCE
Comprehensive State consumer privacy law.
Cybersecurity
MODERATE RELEVANCE
Reasonable security practices.
Applicability
Controllers and processors meeting the Iowa thresholds.
Current validity
CURRENT. In force from 1 January 2025. Read the official PDF on this page for the operative text.
Read first
715D.1 → 715D.2 → 715D.3 → 715D.4 → 715D.8.
Provisions / sections covered
715D.1 – Definitions
Consumer, controller, processor, sensitive data and sale.
715D.2 – Scope and exemptions
Thresholds and entity and data exemptions.
715D.3 – Consumer data rights
Rights and response deadlines.
715D.4 – Controller duties
Notice, security and sensitive data opt-out.
715D.8 – Enforcement
Attorney General enforcement, cure period and penalties.
Subject-matter tags
- Sensitive data
- Controller and processor
- Enforcement and penalties
Subject-matter tags describe what the indexed text discusses. They are not legal conclusions.
Document page in the Knowledge Base - full text or PDF where it is available for this record.
This library locates primary and official sources. It does not interpret the law and it is not legal advice.