A bill for an act relating to consumer data protection, and including retroactive applicability provisions.

SF 143 strengthens Iowa's consumer data protection laws by granting individuals new rights regarding automated data processing. It defines "profiling" as automated analysis of personal data to predict factors like health or behavior, requiring businesses to notify consumers and allow opt-outs for decisions affecting housing, employment, health care, or financial services. The bill expands "health data" protections and clarifies exemptions for entities already regulated under federal laws like HIPAA and the Gramm-Leach-Bliley Act. It applies retroactively to January 1, 2025, affecting businesses handling consumer data in Iowa.