Personal Information Security Breach Protection

Iowa's breach law requires anyone who owns or licenses computerized personal information of Iowa residents to notify affected residents of a breach of security without unreasonable delay, and to notify the Attorney General within five business days if more than 500 Iowans are notified. It also covers paper records that were printed from computerized form. Notice is not required if a documented investigation finds no reasonable likelihood of financial harm.