SF 2200 requires all Iowa school districts, charter schools, and area education agencies to implement specific email security standards by January 1, 2027. The law mandates email security solutions that filter spam/malware, use AI for threat detection, block impersonation attacks, prevent data leaks of student information, and encrypt sensitive emails. Key provisions include scanning for personally identifiable information in emails, automatic encryption for confidential content, and comprehensive logging for compliance. Costs will be covered using existing state school foundation aid, with noncompliance defined as failing to meet all technical requirements.
Iowa's SF 2417 establishes rules for conversational AI services - like chatbots that simulate human interaction - to protect users, especially minors. It requires operators to clearly disclose when users interact with AI (not humans), prevent harmful content (such as sexually explicit material or false romantic interactions), and provide privacy tools for minors and their parents. The law also mandates suicide crisis response protocols and bans AI from misleadingly claiming to offer professional mental health services. Violations can result in civil penalties up to $500,000 per operator, enforced by the Attorney General, with the law taking effect July 1, 2027.
HF 2546 requires Iowa's Department of Education to create a statewide data collection system for schools. The system must standardize electronic data sharing between school districts, nonpublic schools, and area education agencies, ensuring student data privacy while enabling seamless transfer of records like enrollment, assessments, and special education information. It also mandates modernizing the Department's electronic systems, including a portal by 2027 for schools to validate data, check enrollments, and access a live data dictionary. This bill directly affects all Iowa school districts, nonpublic schools, area education agencies, and the Department of Education by changing how they handle and share student data. The law specifies the system must collect only necessary data, maintain data ownership with schools, and avoid requiring purchase of specific software.
HF 2701 regulates how Iowa law enforcement agencies use automatic license plate readers (LPRs). It requires agencies to get state approval for LPRs, mandates vendors to certify data deletion (after 21 days for plate images, 2 years for audit trails), and prohibits sharing data without authorization. The bill generally requires a warrant to access LPR data after 24 hours, with exceptions for voluntary consent, stolen vehicle reports, or emergencies. It also specifies that law enforcement agencies own LPR data and must notify them of third-party data requests. This directly affects law enforcement agencies, vendors selling LPR systems, and Iowa residents whose license plates may be scanned.
Iowa's SF 2414 requires employers to provide written notice to employees (or their authorized representatives) about automated decision systems used in employment-related decisions - excluding hiring - before deployment or by January 1, 2027. The notice must explain the types of decisions affected (e.g., promotions, discipline, work assignments), describe the employee data used, and disclose key parameters that may disproportionately impact outcomes. It applies to employers in Iowa who use such systems to make decisions materially affecting wages, benefits, work conditions, or opportunities. The bill defines "automated decision systems" broadly but excludes tools like spam filters or basic databases. This is a transparency measure, not a restriction on system use.
This bill exempts local fiber optic contractors and network companies from application fees when seeking easements from drainage or levee districts to install fiber optic cable. Specifically, it prohibits districts from charging administrative fees for processing these easement requests if the applicant operates primarily as a local business. Districts may create a published list identifying qualifying local businesses to ensure the fee exemption applies. The law takes effect immediately upon enactment, aiming to reduce barriers for local broadband infrastructure expansion.
HF 2609 requires political campaign materials containing synthetic media - digitally altered images, audio, or video that falsely mimic real people - to include a clear disclosure: "THIS CONTENT GENERATED USING SYNTHETIC MEDIA." It directly affects political advertisers, including websites, social media, TV ads, and printed materials like campaign signs. The law mandates this disclosure be prominently displayed, places sole responsibility on the publisher for compliance, and imposes penalties for willful violations (up to a year in jail or fines of $430-$2,560). The Iowa Ethics and Campaign Disclosure Board must create implementing rules, and the disclosure does not prevent other legal actions against harmful synthetic media use.
HF 2295 prohibits Iowa state and local police from using drones for routine traffic enforcement, except when assisting in pursuits of drivers fleeing law enforcement for violations like reckless driving. It allows certified officers to operate drones during active chases to help apprehend fleeing drivers and issue traffic citations for violations committed during the pursuit. The bill also restricts drone-collected evidence from being used in court unless obtained legally - such as from public airspace or with a warrant for private areas - and only if consistent with state/federal law. This directly affects law enforcement operations and the admissibility of evidence in traffic-related legal cases.
This bill requires app stores and developers to implement specific protections for minors (under 18) using mobile apps. App stores must verify a user’s age category (child, younger teen, older teen, or adult) during account creation, and for minors, they must link the account to a parent account and obtain verifiable parental consent before any app download, purchase, or in-app transaction. The law also mandates that app stores notify parents of significant app changes (like new in-app purchases or privacy updates) and secure parental consent renewal. These requirements apply to all app stores operating in Iowa, directly affecting app providers, developers, and minor users.
HF 2540 requires Iowa high schools to offer at least one semester of computer science and artificial intelligence (AI) instruction to satisfy graduation requirements, beginning with the 2030-2031 graduating class. The bill mandates that all courses include foundational AI concepts, how AI works, and its societal and ethical impacts. Schools must provide this instruction starting in 2022 (for grade-level offerings), and the state must publish approved course lists and a teacher-training plan by 2027, with special support for small schools. This directly affects all Iowa public and accredited nonpublic high schools and their students, integrating AI education into graduation standards.
