90th General Assembly · Funnel one-pager · Monday, November 9, 2026
SF 495: Relating to affirmative defenses for entities using cybersecurity programs
Died when the session ended · The General Assembly adjourned on April 19, 2024. Bills that didn’t pass both chambers died.
What it does
This bill creates affirmative defenses for entities using cybersecurity programs. The bill provides that a covered entity seeking an affirmative defense must use a cybersecurity program for the protection of personal information and restricted information and the cybersecurity program must reasonably conform to an industry-recognized cybersecurity framework. A cybersecurity program must continually evaluate and mitigate reasonably anticipated threats, periodically evaluate the maximum probable loss attainable from a data breach, and communicate to affected parties the risk posed and actions the affected parties could take to reduce damages if a data breach has occurred.
Sponsors
Technology (companion To Lsb 1265hv By Committee on Economic Growth and Technology) committee
Cost
No fiscal note
Lobbying · 4 for, 0 against
For: Iowa Credit Union League; Meidh Technologies, Inc; Technology Association of Iowa; Wellmark, Inc.
In plain words
- March 2, 2023Filed in the Senate
- March 2, 2023Approved by the Senate committee
- April 19, 2023Withdrawn
From public records at legis.iowa.gov, compiled by Funnel (iowafunnel.com), an independent, nonpartisan site. Current as of Monday, November 9, 2026. https://iowafunnel.com/bills/90/SF495