As expected, the number of state consumer privacy laws continues to rise. Joining the ranks of California, Colorado, Connecticut, Utah and Virginia is now Iowa. On March 28, 2023, Iowa’s Governor signed the Iowa Data Privacy Act into law, which will go into effect on January 1, 2025. The Hawkeye State’s law closely mirrors Utah’s law, and it deviates in some of the same ways that Utah did from the model in Colorado, Connecticut and Virginia. The bad news, therefore, is growing discordance among the states as to a “model” for state consumer privacy bills.
