A bill for an act relating to school email security by requiring school districts, charter schools, and area education agencies to implement certain email security standards.

SF 2200 requires all Iowa school districts, charter schools, and area education agencies to implement specific email security standards by January 1, 2027. The law mandates email security solutions that filter spam/malware, use AI for threat detection, block impersonation attacks, prevent data leaks of student information, and encrypt sensitive emails. Key provisions include scanning for personally identifiable information in emails, automatic encryption for confidential content, and comprehensive logging for compliance. Costs will be covered using existing state school foundation aid, with noncompliance defined as failing to meet all technical requirements.