Esheria Regulatory Atlas
Personal data, privacy, cybersecurity duties, processing, and cross-border transfers. These records come from release legal-2026.07.26-907 and link directly to stored legal text.
132 matching statutes
United States — Iowa
1 provisions
An online marketplace must use reasonable security procedures and safeguards to protect certain collected data from unauthorized access, use, disclosure, destruction, or modification.
United States — Iowa
1 provisions
Certain agencies and peace officers generally may not share intelligence data outside the agency unless listed conditions are met.
United States — Iowa
1 provisions
This chapter applies to certain businesses or service/product providers that meet personal-data processing thresholds, and it excludes several government, financial, health, nonprofit, education, and specified data categories.
United States — Iowa
1 provisions
The commission may nominate an area for prospective protected water area designation if it has gathered or received basic resource and user data and thinks the area merits inclusion. Other public agencies, interest groups, or citizens may recommend nomination by submitting a statement to the commission.
United States — Iowa
1 provisions
State and local agencies must consider groundwater protection policies, and agencies must cooperate with the department on groundwater information, data, and research. Political subdivisions may implement such policies within their jurisdictions if they are at least as stringent as, and consistent with, the department’
United States — Iowa
1 provisions
The director must carry out listed groundwater protection duties, including monitoring, mapping, data systems, public access, rulemaking criteria, enforcement actions, public dissemination, and a water-quality education program.
United States — Iowa
1 provisions
The Department of Agriculture and Land Stewardship and the Department of Natural Resources must carry out several water-quality, conservation, watershed, and floodplain-related programs and services.
United States — Iowa
1 provisions
A controller must use reasonable data security practices, give a clear privacy notice, disclose certain sales or targeted advertising, and use secure request methods. It also may not process sensitive data or discriminate in prohibited ways, and it may not require a new account to exercise consumer rights.
United States — Iowa
1 provisions
This section lists situations where a controller or processor may act without the chapter restricting that action, and it also limits processing to the purposes listed here unless another chapter rule allows more.
United States — Iowa
1 provisions
The department must adopt rules to protect the security and confidentiality of certain criminal data systems and to control who may access them.
United States — Iowa
1 provisions
Intelligence data may be stored and shared only under stated access and disclosure limits, and a defendant or juvenile may challenge accuracy and seek review.
United States — Iowa
1 provisions
A certified service provider must limit retention of consumers’ personally identifiable information and can operate only if it certifies specified privacy safeguards; the department must give public notice, and individuals get access and correction rights when their information is retained by the state.
United States — Iowa
1 provisions
This provision defines terms used in the chapter.
United States — Iowa
1 provisions
This section says Iowa should maintain a central registry for child abuse information and protect privacy while doing so.
United States — Iowa
1 provisions
The section says Iowa should have a central registry for dependent adult abuse information and that privacy protections are essential.
United States — Iowa
1 provisions
Stroke centers in the state must report stroke data to the statewide database, and the department must maintain and use the database and related data tools.
United States — Iowa
1 provisions
The department must collect and manage behavioral health data, and administrative services organizations must report required data to the department.
United States — Iowa
1 provisions
A covered entity seeking this affirmative defense must maintain a written cybersecurity program with specified safeguards.
United States — Iowa
1 provisions
This section keeps child abuse information confidential and limits access to specified people and entities, with special procedures for interstate cases and fatality or near-fatality requests.
United States — Iowa
1 provisions
The department must maintain separate water-quality listings, evaluate available data, document its listing decisions, and consider natural conditions when listing, removing, or assigning responsibility.