Iowa Data Removal Guide (2026)
Iowa's Consumer Data Protection Act took effect January 2025. The ICDPA has a 90-day response framework and a more limited set of consumer rights than some peer laws, so residents should confirm the request type, controller scope, exemptions, and current response rules.
Research status: published state guide pending fresh official-source re-verification.
This page is educational orientation, not legal advice. Scope, exemptions, deadlines, penalties, regulator powers and broker routes can change. Verify the current statute and state regulator guidance before relying on a right or deadline.
At a glance
- Comprehensive state privacy law
- Recorded: ICDPA
- Broker response deadline
- 90 days in this research snapshot for qualifying requests; extensions and exemptions may apply
- Enforcement
- Iowa Attorney General. Consumer Protection Division
Iowa Consumer Data Protection Act (ICDPA)
ICDPA applies to persons conducting business in Iowa or producing products or services targeted to Iowa residents that meet either the 100,000-consumer branch or the 25,000-consumer-plus-more-than-50%-sale-revenue branch, subject to statutory exemptions. Rights include access, deletion of personal data provided by the consumer, portability, and sale opt-out; the cited chapter does not list a correction or profiling opt-out right and does not require a universal opt-out mechanism. Controllers generally have 90 days to respond, with a possible 45-day extension. The AG has exclusive enforcement authority and a separate 90-day written notice-and-cure process.
Read the full ICDPAexplainer →Scope, thresholds, exceptions, cure rules, and enforcement details where documented.
What rights do Iowa residents have?
- →Delete personal data provided by the consumer, access, port, and opt-out of sale
- →No correction right listed in §715D.3
- →No profiling opt-out listed in §715D.3
- →90-day response window (longer than peers)
Where does your data leak from in Iowa?
The FTC explains that people-search sites may combine public records, public social profiles, and information from other brokers. The examples below are a research snapshot, not an exhaustive or person-specific source map for Iowa:
- Iowa Courts Online case search
- Polk, Linn, Scott County assessor records
- Iowa DOT driver records
Generate requests in under 60 seconds
Generate requests for 1009 US/global broker workflows for $9
What if a broker ignores your request?
If a qualifying request does not receive a response within the applicable window, review the current extension and exemption rules, then consider the Iowa Attorney General. Consumer Protection Division complaint route. The authority's jurisdiction and available remedies vary.
File a complaint with Iowa Attorney General. Consumer Protection Division ↗FAQ: Iowa data removal
How does Iowa's ICDPA differ from some state laws?+
The ICDPA has a defined set of access, deletion, portability, and opt-out rights, along with its own response and enforcement rules. Compare the current statute and controller notice before assuming that a correction, profiling, cure, or deletion rule from another state applies in Iowa.