Privacy Law Library

Computer Spyware, Malware, and Ransomware Protection

Iowa Spyware Law

Data security · Other

Iowa's spyware law makes it a crime to install software on someone else's computer that deceptively collects personal information (such as keylogging, browsing-history profiling, or extracting ID and account numbers), hijacks browser settings, disables security software, or resists removal. A 2023 amendment added ransomware offenses and a civil claim for ransomware victims.

Where

Iowa

Citation

Iowa Code ch. 715 (715.1 to 715.11)

Status

In force

Last amended

2023-07-01

Enforced by

County attorneys and the Attorney General (criminal prosecution); ransomware victims (civil action)

People can sue

Limited

Penalties

Spyware violations are aggravated misdemeanors, or class D felonies if losses exceed $1,000 (715.7). Persons directly injured by ransomware may sue for actual damages, attorney fees, and costs (715.9(6)); the spyware subchapter has no civil remedy.

Applies to

• Any person who is not the owner or operator of a computer and who transmits software to it (715.4, 715.5)
• Exempt: carriers, cable operators, hardware and software providers, and information service providers monitoring for security, diagnostics, support, authorized updates, or fraud prevention; law enforcement requests (715.6)