Iowa Consumer Data Protection Act ("ICDPA")
Iowa passed the Iowa Consumer Data Protection Act (“ICDPA”), which will take effect on January 1, 2025. With the passing of this new law, Iowa becomes the sixth state to enact a consumer data privacy law. The ICDPA gives Iowa residents the rights to confirm, obtain data, delete, and opt-out of the sale of their personal data, which is similar to the other five states that have enacted privacy laws. The enforcement is entirely up to the Attorney General and there is no private right of action for consumers.
