SF 5 expands Iowa's invasion of privacy law to include possessing non-consensual intimate images. It makes it a crime for someone to knowingly possess photos or videos taken without consent for sexual gratification, even if they didn't take the images themselves. This applies when the person being filmed was in partial or full nudity and had a reasonable expectation of privacy. Violating this law is classified as an aggravated misdemeanor and a tier II sex offense, requiring 10 years of sex offender registration. The bill directly affects individuals who possess such non-consensual images, broadening the scope of criminal liability beyond just capturing them.
HF 582 requires county voter registrars and the state voter registrar to remove a voter's date of birth and home address from any voter registration list requested by a person. This bill directly affects voters whose personal information appears on publicly accessible voter lists when those lists are requested. The key provision mandates that specific personal details - including date of birth, home address, and other identifiers - must be deleted from the list before it is provided. The bill aims to enhance privacy by limiting the personal information shared in these voter lists upon request. It does not change voter eligibility or registration requirements.
HF 744 requires counties and cities to make required forms (like licenses or filings) available on a public online portal. The portal must accept digital submissions while protecting personal information and cannot use Social Security numbers as identifiers. This applies directly to county officers (e.g., auditors, sheriffs) and city clerks handling public service requests. The bill does not mandate electronic signatures for all agencies but specifically updates county and city requirements for digital form access.
This bill prevents Iowa state agencies and law enforcement from sharing drivers' personal information (like license or registration details) when trying to collect fines for traffic violations recorded by cameras located outside Iowa. It specifically blocks the use of such data to issue or collect fines for out-of-state camera violations, such as speeding or running red lights captured by cameras in other states. Exceptions apply only if the request involves investigating criminal or civil violations unrelated to traffic law. The law takes effect January 1, 2026.
HF 849 expands the definition of harassment to include the unauthorized sharing of personal information. The bill makes it an offense to purposefully disseminate, publish, distribute, or post another person's personal information without their consent, with the intent to threaten, intimidate, annoy, or alarm them or encourage others to do so. "Personal information" is defined to include contact details like home addresses, phone numbers, email addresses, social media profiles, places of employment, and photographic or film depictions. A violation of this provision is classified as harassment in the first degree, an aggravated misdemeanor, carrying potential penalties of confinement and fines.
This bill prohibits courts from issuing subpoenas or search warrants to obtain menstrual health data. It directly affects individuals whose menstrual health data - defined as any information created or received by an entity about a person's menstrual health, status, or predictions - might otherwise be sought in legal proceedings. The key provision amends Iowa law to explicitly ban subpoenas for such data under Section 622.63 and prohibits search warrants for digital menstrual health data under Section 808.2. These changes prevent law enforcement or courts from accessing this sensitive personal information through legal process. The bill focuses solely on restricting data collection methods, not on broader health policies.
SF 143 strengthens Iowa's consumer data protection laws by granting individuals new rights regarding automated data processing. It defines "profiling" as automated analysis of personal data to predict factors like health or behavior, requiring businesses to notify consumers and allow opt-outs for decisions affecting housing, employment, health care, or financial services. The bill expands "health data" protections and clarifies exemptions for entities already regulated under federal laws like HIPAA and the Gramm-Leach-Bliley Act. It applies retroactively to January 1, 2025, affecting businesses handling consumer data in Iowa.
HF 503 amends Iowa's consumer data protection law to give residents greater control over how personal data is used, particularly regarding automated profiling that affects major life decisions like loans, housing, jobs, or healthcare. It defines "profiling" as automated analysis of data to predict factors like health or behavior, requiring businesses to notify consumers in plain language and allow them to opt out of such profiling. The bill exempts health data already covered by federal HIPAA rules, financial institutions under federal law, government entities, and public health activities using de-identified data. It applies retroactively to January 1, 2025, affecting businesses handling consumer data in Iowa.
HF 406 requires device companies (manufacturers of smart devices) and AI application developers to provide clear, upfront notices when users initialize devices or start apps with AI. These notices must explain exactly what private data the AI accesses, how it will be used, and give users interactive options to refuse specific data access or uninstall the AI before it collects data. The bill mandates that all data usage must align with a "statement of purpose" disclosed to users, prohibiting companies from accessing or using data in ways not previously explained. It directly affects consumers using smart devices (like smartphones or tablets) sold in Iowa after July 2025, as well as manufacturers and developers of AI-enabled products.
SF 289 updates Iowa's invasion of privacy law to specifically address non-consensual recording. It makes it a violation to knowingly view, photograph, or film someone for sexual gratification, or to possess such material without a legitimate reason. The bill directly affects individuals who secretly record others in private settings for sexual purposes. Penalties apply when these actions occur, clarifying the legal consequences for violating privacy in this manner. This law strengthens protections against non-consensual intimate recordings by defining clear prohibited conduct.
