Extract from Jim Gill’s article “Iowa Joins Five Other US States By Passing Data Privacy Law”
Last month, I reported on five new privacy laws going into effect in 2023. Well, now we can add one more to the list of US state privacy laws on the books.
The recent passage of Iowa’s data privacy law is a significant development in the ongoing effort to protect consumer privacy. The law, which applies to companies that process the personal data of at least 100,000 Iowa consumers or 25,000 Iowa consumers and derive 50% of their revenue from the sale of personal data, includes a number of provisions that are designed to give consumers more control over their personal data. The law is slated to take effect on January 1, 2025.
One of the law’s most important provisions is the right to access personal data. Under the law, consumers have the right to request a copy of their personal data from any company that collects or processes it. This right will allow consumers to see what information companies have collected about them and how it is being used.
Another important provision of the law is the right to delete personal data. Under the law, consumers have the right to request that a company delete their personal data. This right will allow consumers to remove their personal information from company databases.
