Back to the bill

91st General Assembly · Funnel one-pager · Monday, November 9, 2026

HF 2048: Relating to personal data processing practices for companies, and making civil penalties applicable

Died when the session ended · The General Assembly adjourned on October 2, 2026. Bills that didn’t pass both chambers died.

What it does

This bill relates to personal data (data) processing practices for companies. The bill defines “automated decision making” as a process that uses data to make decisions, including but not limited to profiling, risk scoring, and determining eligibility, without human involvement. The bill defines “company” as a person conducting business in this state that processes the data of 5,000 or more individuals who reside in this state in a single calendar year. The bill defines “personal data” as any information that is linked or reasonably linkable to an identified or identifiable individual.

Sponsors

Rep. Jason Gearhart (R)

Cost

No fiscal note

Lobbying · 0 for, 2 against

Against: RELX Inc.; T-Mobile USA, Inc.

In plain words

  1. January 14, 2026Filed in the House and sent to the Economic Growth and Technology committee

From public records at legis.iowa.gov, compiled by Funnel (iowafunnel.com), an independent, nonpartisan site. Current as of Monday, November 9, 2026. https://iowafunnel.com/bills/91/HF2048