Esheria Regulatory Atlas
Personal data, privacy, cybersecurity duties, processing, and cross-border transfers. Every result links to its stored legal text and available official source evidence.
132 matching statutes
United States — Iowa
1 provisions
An online marketplace must use reasonable security procedures and safeguards to protect certain collected data from unauthorized access, use, disclosure, destruction, or modification.
United States — Iowa
1 provisions
Certain agencies and peace officers generally may not share intelligence data outside the agency unless listed conditions are met.
United States — Iowa
1 provisions
This chapter applies to certain businesses or service/product providers that meet personal-data processing thresholds, and it excludes several government, financial, health, nonprofit, education, and specified data categories.
United States — Iowa
1 provisions
The commission may nominate an area for prospective protected water area designation if it has gathered or received basic resource and user data and thinks the area merits inclusion. Other public agencies, interest groups, or citizens may recommend nomination by submitting a statement to the commission.
United States — Iowa
1 provisions
State and local agencies must consider groundwater protection policies, and agencies must cooperate with the department on groundwater information, data, and research. Political subdivisions may implement such policies within their jurisdictions if they are at least as stringent as, and consistent with, the department’
United States — Iowa
1 provisions
The director must carry out listed groundwater protection duties, including monitoring, mapping, data systems, public access, rulemaking criteria, enforcement actions, public dissemination, and a water-quality education program.
United States — Iowa
1 provisions
The Department of Agriculture and Land Stewardship and the Department of Natural Resources must carry out several water-quality, conservation, watershed, and floodplain-related programs and services.
United States — Iowa
1 provisions
A controller must use reasonable data security practices, give a clear privacy notice, disclose certain sales or targeted advertising, and use secure request methods. It also may not process sensitive data or discriminate in prohibited ways, and it may not require a new account to exercise consumer rights.
United States — Iowa
1 provisions
This section lists situations where a controller or processor may act without the chapter restricting that action, and it also limits processing to the purposes listed here unless another chapter rule allows more.
United States — Iowa
1 provisions
The department must adopt rules to protect the security and confidentiality of certain criminal data systems and to control who may access them.
United States — Iowa
1 provisions
Intelligence data may be stored and shared only under stated access and disclosure limits, and a defendant or juvenile may challenge accuracy and seek review.
United States — Iowa
1 provisions
A certified service provider must limit retention of consumers’ personally identifiable information and can operate only if it certifies specified privacy safeguards; the department must give public notice, and individuals get access and correction rights when their information is retained by the state.