89th General Assembly · Funnel one-pager · Monday, November 9, 2026

HF 2506: Relating to consumer data protection, providing civil penalties, and including effective date provisions

Died when the session ended · The 2022 session adjourned on May 24, 2022, the General Assembly’s last regular session. Bills that didn’t pass both chambers died.

What it does

This bill relates to consumer data protection. The bill contains several definitions. The bill defines “controller” to mean a person that, alone or jointly with others, determines the purpose and means of processing personal data. The bill defines “identified or identifiable natural person” to mean a person who can be readily identified, directly or indirectly. The bill defines “personal data” to mean any information that is linked or reasonably linkable to an identified or identifiable natural person, but does not include de-identified data or publicly available information.

Cost

See the fiscal note

It is estimated that the fiscal impact of HF 2506 will be net neutral. The Bill provides that expenses, fees, and penalties shall be paid into the Consumer Education and Litigation Fund. These revenues are estimated to offset any costs associated with a succes…

Senate subcommittee · named March 15, 2022

Sen. Amy Sinclair (R) · amy.sinclair@legis.iowa.gov
Sen. Nate Boulton (D)
Sen. Brad Zaun (R)

Lobbying · 3 for, 3 against

For: Allied Insurance; Nationwide Agribusiness; Nationwide Mutual Ins. Co.

Against: Iowa Hotel & Lodging Association; Iowa Restaurant Association; Microsoft Corp.

In plain words

February 23, 2022Filed in the House
March 1, 2022Cost estimate (fiscal note) posted
March 14, 2022Passed the House, 91–2
March 15, 2022Arrived in the Senate
March 15, 2022Senate subcommittee named: Sinclair, Boulton and Zaun