Sign in

Back to the bill

90th General Assembly · Funnel one-pager · Monday, November 9, 2026

SF 262: Relating to consumer data protection, providing civil penalties, and including effective date provisions

Signed into law

What it does

This bill relates to consumer data protection. The bill contains several definitions. The bill defines “controller” to mean a person that, alone or jointly with others, determines the purpose and means of processing personal data. The bill defines “identified or identifiable natural person” to mean a person who can be readily identified, directly or indirectly. The bill defines “personal data” to mean any information that is linked or reasonably linkable to an identified or identifiable natural person, but does not include de-identified data or publicly available information.

Sponsors

Technology committee

Cost

No fiscal note

Lobbying · 4 for, 0 against

For: AT & T; Hy-Vee, Inc.; Iowa Association of Business and Industry (ABI); Technology Association of Iowa

In plain words

  1. February 13, 2023Filed in the Senate
  2. February 13, 2023Approved by the Senate committee
  3. March 6, 2023Passed the Senate, 47–0
  4. March 15, 2023Took the place of HF 346 on the House floor (the same legislation)
  5. March 15, 2023Passed the House, 97–0
  6. March 28, 2023Sent to the Governor
  7. March 28, 2023Signed into law

From public records at legis.iowa.gov, compiled by Funnel (iowafunnel.com), an independent, nonpartisan site. Current as of Monday, November 9, 2026. https://iowafunnel.com/bills/90/SF262