Iowa Consumer Data Protection Act
In effect since January 1, 2025, for businesses that handle data on 100,000 or more Iowa consumers a year, or on 25,000 or more while earning over half their gross revenue from selling it. These are among the highest thresholds of any state, so small businesses are almost always exempt. Your attorney confirms whether it applies to you.