Iowa Consumer Data Protection Act (Consumer Data Protections)

Iowa's comprehensive consumer privacy law gives Iowa residents the right to confirm and access their personal data, delete data they provided, obtain a portable copy, and opt out of the sale of personal data. It requires notice and an opportunity to opt out before processing sensitive data (and COPPA-compliant processing for a known child's data), rather than opt-in consent. It has no right to correct, no data protection assessments, and a 90-day cure period enforced only by the Attorney General.