Who must Comply with the Iowa Consumer Data Protection Act (“ICDPA”)?
The ICDPA applies to a person conducting business in Iowa or producing products or services that are targeted to consumers who are residents of Iowa and that during a calendar year does either of the following:
-
Controls or processes personal data of at least 100,000 consumers; or
-
Controls or processes personal data of at least 25,000 consumers and derives over 50% of gross revenue from the sale of personal data.
For more information, see here: https://www.legis.iowa.gov/publications/search/document?fq=id:1371203
These materials were obtained directly from the State Legislative websites and are posted here for your review and reference only. No Claim to Original State Government Works. This may not be the most recent version. The State may have more current information. We make no guarantees or warranties about the accuracy or completeness of this information, or the information linked to. Please check the linked sources directly.