This bill requires automatic license plate readers used by law enforcement to permanently delete captured vehicle images and associated data within 72 hours (down from 30 days). It defines "historical location information" as data revealing locations more than 24 hours old and restricts sharing this data with private third parties. Law enforcement may access such data only with a warrant, consent, during emergencies (like Amber Alerts), or for specific enforcement purposes. The bill also limits interstate sharing of historical location data and mandates public disclosure of inter-agency agreements within metropolitan areas.
HSB 700 prohibits using aircraft tracking data (ADS-B) to calculate, charge, or collect fees for operating aircraft within Iowa. It specifically bans people or companies from collecting or using this data - which shows an aircraft’s location, altitude, and speed - to impose fees on pilots or operators. Violators face penalties under existing fraud laws, ranging from a $105 fine for minor offenses to up to 10 years in jail for large-scale violations. The law takes effect on November 1, 2026.
HF 2274 requires operators of internet sites, apps, or site/app segments containing a significant portion of material deemed "pornographic for minors" to implement reasonable age verification. This prevents minors from accessing such content using methods like digital ID checks, commercially reasonable transactional data analysis, or attorney general-approved approaches. The law exempts bona fide news organizations, public interest broadcasts, and internet service providers (unless they created the content). Violations carry civil penalties up to $1,000 per incident, enforced by the attorney general.
This bill restricts certain activities involving foreign entities in Iowa. It prohibits state agencies and local governments from purchasing or operating drones made by companies on a federal "covered list" (typically Chinese manufacturers), requires replacing such drones with approved models, and creates a class D felony for flying foreign-made drones within 400 feet of critical infrastructure like power plants. It also mandates that foreign entities engaging in lobbying or political consulting in Iowa register with the ethics board within 48 hours and submit detailed records of their activities, with daily fines up to $5,000 for non-compliance. Additionally, the bill states that international agreements (e.g., from the WHO or UN) do not have legal force in Iowa unless formally adopted by the state legislature, and bans using taxpayer funds to enforce such agreements.
HF 2375 requires a human driver to be physically present in self-driving vehicles used for commercial purposes (like delivery services or ride-hailing) in Iowa, while allowing driverless operation for personal use. The human driver must monitor the vehicle, intervene manually if needed (including stopping the vehicle), hold a valid driver's license with required commercial endorsements (like a CDL), and follow all vehicle safety laws. This directly affects commercial operators of autonomous vehicles, ensuring human oversight during operations. The bill builds on existing Iowa law that already permits driverless vehicles without humans for personal use, adding this specific requirement for commercial applications.
SF 2421 would have required healthcare review groups to use human reviewers - not solely artificial intelligence - for decisions denying, delaying, or downgrading prior authorizations (e.g., changing urgent requests to standard ones). It mandated that denials include written explanations citing specific criteria, along with detailed attestations about the reviewer’s qualifications and specialty expertise. The bill also required separate human reviews for appeals and prohibited the same reviewer from handling both initial denials and appeals. This bill was withdrawn on March 4, 2026, and did not become law.
HF 2507 requires operators of public conversational AI services (like chatbots) to clearly disclose when users interact with AI, especially to minors under 18. It mandates persistent disclaimers, bans reward systems to boost minor engagement, and prohibits generating sexual content, simulating human interaction, or sexually objectifying minors. Operators must also provide privacy tools for minors and parents (for under-13s or high-risk cases) and implement suicide crisis protocols. Violations carry civil penalties up to $500,000 per operator, with enforcement by Iowa’s attorney general starting July 1, 2027. The law excludes research tools, business internal systems, and narrow-topic AI from its scope.
This Iowa bill (HSB 743) establishes new rules for law enforcement to obtain "reverse-location information" - historical location data from multiple electronic devices within a specific geographic area (a "geofence") during a crime investigation. It requires law enforcement to obtain a judicially approved warrant for such searches, only when investigating violent felonies with an imminent public safety threat, and mandates that all collected device data be anonymized before release. The bill also requires detailed warrant applications including maps of the geofence, clear notices about the broad data collection, and evidence of probable cause. These provisions directly affect law enforcement practices and protect the privacy of individuals whose devices may be incidentally captured in such searches.
SF 2278 prohibits large food retail stores (over 15,000 sq ft selling primarily food) from using personalized algorithmic pricing or surveillance pricing based on consumer data. It requires clear disclosure ("THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA") when algorithmic pricing is used, bans electronic shelf labels for personalized pricing, and prohibits using data about minors (<17) or protected class characteristics (like race or gender) to set prices. Retailers must use physical price tags instead of digital displays for non-promotional pricing and cannot withhold discounts based on protected class data. The law applies only to qualifying food retailers, excluding financial services and insurers.
This bill regulates digital financial kiosks in Iowa that exchange digital assets (like cryptocurrencies) for cash or other assets. It requires kiosk operators to obtain a money transmission license, report all kiosk locations to the banking division, and comply with specific pricing rules. Violations could result in civil fines up to $10,000 per incident, enforced by the attorney general. The law takes effect immediately upon enactment and applies to all such kiosks operating in Iowa.
