Bills › 91st General Assembly

HF 2606Died when the session ended · February 19, 2026

Requiring persons who operate certain internet sites, applications, or a segment of an internet site or application that contains material pornographic for minors to perform reasonable age verification

Sponsored by the House Judiciary Committee, Rep. Bill Gustoff (R)

Topics:Civil rightsTechnology & privacyKids online & social media

Same legislation: HF 2274

Where it is now

  1. Done: IntroducedFebruary 4, 2026
  2. Done: SubcommitteeFebruary 9, 2026
  3. Done: House committeeFebruary 17, 2026
  4. Stopped: Passes the HouseDied when the General Assembly ended
  5. Next: Senate committeeFunnel: by March 20, 2026
  6. Next: Passes the Senate
  7. Next: To the Governor
  8. Next: Signed into law

Died when the session ended The 2026 session adjourned on May 3, 2026, the General Assembly’s last regular session. Bills that didn’t pass both chambers died. What’s a funnel?

What’s in it

AI summary Companies that run websites or apps with adult content must check that their users are old enough to see it. These businesses can use digital IDs or other reasonable methods to verify age, but they are not allowed to keep your personal information. The attorney general will enforce these rules and can fine companies that do not comply.1

Read the official explanation

This bill requires persons who operate certain internet sites (sites), applications (apps), or a segment of a site or an app to perform reasonable age verification. The bill defines “application”, “commercial entity”, “digital identification”, “minor”, “mobile device”, “news-gathering organization”, “pornographic for minors”, “substantial portion”, and “transactional data”. The bill prohibits a person from operating a site, an app, or a segment of a site or an app, including on a social media platform, that contains a substantial portion of content pornographic for minors unless the person uses reasonable age verification to prevent minors from accessing the content pornographic for minors. Reasonable age verification includes requiring an individual to provide digital identification; a method that is commercially reasonable given the person’s scope of business and that relies on transactional data to verify an individual’s age; or a method approved by the attorney general by rule. The bill prohibits a person that performs reasonable age verification under the bill, including a third party that contracts with a person to perform reasonable age verification for the person, from retaining any identifying information of an individual subject to reasonable age verification unless retention of the identifying information is required by law or a court order. The bill requires a person that performs reasonable age verification under the bill, including a third party that contracts with a person to perform reasonable age verification for the person, to use reasonable methods given the person’s scope of business to secure all data collected and transmitted under the bill. The bill lists certain entities and situations to which the bill does not apply. The bill requires the attorney general to enforce the bill, seek injunctions for violations of the bill, and bring actions against a person thought to be in violation of the bill. Each time an individual accesses a site or application not in compliance with the bill constitutes a separate violation. A violation of the bill is punishable by a civil penalty of up to $1,000 per violation. A person in violation of the bill shall not accrue civil penalties of more than $10,000 in a single day. Civil penalties collected under the bill shall be deposited into the general fund of the state. The bill requires the attorney general to adopt rules to implement and administer the bill.

Why it matters. Operators of certain websites and applications, including social media platforms, must use reasonable age verification methods to prevent minors from accessing content that is pornographic for minors. These businesses and any third parties they hire to verify ages are prohibited from keeping identifying information unless required by law and must use reasonable methods to secure all collected data. The attorney general is responsible for enforcing these rules and can seek civil penalties of up to $1,000 per violation, with a daily limit of $10,000.2

Full bill text3

1 written public comment to its subcommittee: February 11, 2026 (1) · on the Legislature’s site

Iowa Code it changes

Creates§554J.1§554J.2§554J.3§554J.4§554J.5

How the Code works4

Lobbying

7 for · 0 against · 6 undecided · Who →

Family tree