Sign in

Back to the bill

89th General Assembly · Funnel one-pager · Monday, November 9, 2026

SF 2208: Relating to consumer data protection, making penalties applicable, and including effective date provisions

Died when the session ended · The General Assembly adjourned on May 24, 2022. Bills that didn’t pass both chambers died.

What it does

This bill relates to consumer data protection. The bill defines “controller” to mean a person that, alone or jointly with others, determines the purpose and means of processing personal data. The bill defines “process” or “processing” to mean any operation or set of operations performed, whether by manual or automated means, on personal data or on sets of personal data, such as the collection, use, storage, disclosure, analysis, deletion, or modification of personal data. The bill defines “processor” to mean a person that processes personal data on behalf of a controller.

Sponsors

Not listed

Cost

See the fiscal note

It is estimated that the fiscal impact of HF 2506 will be net neutral. The Bill provides that expenses, fees, and penalties shall be paid into the Consumer Education and Litigation Fund. These revenues are estimated to offset any costs associated with a succes…

Senate subcommittee · named February 9, 2022

  • Sen. Zach Nunn (R)
  • Sen. Liz Mathis (D)
  • Sen. Craig Steven Williams (R) · craig.williams@legis.iowa.gov

Lobbying · 3 for, 3 against

For: Allied Insurance; Nationwide Agribusiness; Nationwide Mutual Ins. Co.

Against: Iowa Hotel & Lodging Association; Iowa Restaurant Association; Microsoft Corp.

In plain words

  1. February 8, 2022Filed in the Senate and sent to the Commerce committee
  2. February 9, 2022Senate subcommittee named: Nunn, Mathis and Williams

From public records at legis.iowa.gov, compiled by Funnel (iowafunnel.com), an independent, nonpartisan site. Current as of Monday, November 9, 2026. https://iowafunnel.com/bills/89/SF2208