Iowa · AI compliance plan
What Iowa’s AI laws require of you.
Iowa has 6 enacted AI laws in our records. We have mapped 6 of them duty by duty: 21 duties in all, each with who it falls on, when it starts and the section of law it comes from. The next one starts July 1, 2027.
The plan at a glance
21duties from 6 laws
0start in the next 90 days; the next on July 1, 2027
0laws let people sue over a violation
1law gives a set number of days to fix a violation before enforcement
Download CSV and calendar with Pro
Open as a checklist
Pro turns this plan into a spreadsheet for audit files and a calendar of every start date. The plan on this page stays open to everyone.
Already in effect 12 duties
These duties are in force today.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| July 1, 2019 | Iowa automated driving system vehicles law (SF 302, 2019) | Owner or operator | Operate driverless only if the vehicle can reach a minimal risk condition, can obey traffic and safety laws (unless exempted) and is manufacturer-certified to federal safety standards.Applies when: A driverless-capable vehicle on public highways with no conventional human driver present. | Ongoing | Iowa Code 321.515(1) |
| July 1, 2019 | Iowa automated driving system vehicles law (SF 302, 2019) | Human driver | Hold a valid license, carry the required liability coverage, operate as the manufacturer requires, and take manual control when the system prompts.Applies when: A system-equipped vehicle operated with a human driver present. | Ongoing | Iowa Code 321.515(2)(a) |
| July 1, 2019 | Iowa automated driving system vehicles law (SF 302, 2019) | Owner | Obtain financial liability coverage before the vehicle runs on Iowa highways, and keep proof of coverage in the vehicle.Applies when: Any system-equipped vehicle. | Ongoing | Iowa Code 321.516 |
| July 1, 2021 | Iowa personal delivery devices law (HF 304, 2021) | Business entity | Operate a personal delivery device only if an agent can monitor it and remotely take physical control while it is engaged.Applies when: Any device operated under chapter 321O. | Ongoing | Iowa Code 321O.3(1) |
| July 1, 2021 | Iowa personal delivery devices law (HF 304, 2021) | Operator | Ensure the device follows pedestrian rules, yields to all traffic, does not obstruct others, follows local ordinances, can stop safely and carries no placardable hazardous material.Applies when: While the device is engaged. | Ongoing | Iowa Code 321O.4 |
| July 1, 2021 | Iowa personal delivery devices law (HF 304, 2021) | Operator | Keep to 6 mph in pedestrian areas; on roads posted 40 mph or less, stay as far right as practicable and go no faster than 20 mph or the limit.Applies when: Any operation. | Ongoing | Iowa Code 321O.5(1) |
| July 1, 2021 | Iowa personal delivery devices law (HF 304, 2021) | Business entity | Fit each device with a marker giving the operating business's name, contact information and a unique ID number, and brakes allowing a controlled stop.Applies when: Every device. | Ongoing | Iowa Code 321O.6(1) |
| July 1, 2021 | Iowa personal delivery devices law (HF 304, 2021) | Operator | Display lighted front and rear lamps, visible on all sides and recognizable from 500 feet in clear weather, during the lamp hours in 321.384.Applies when: Operation during the times set by Iowa Code 321.384. | Ongoing | Iowa Code 321O.6(2) |
| July 1, 2021 | Iowa personal delivery devices law (HF 304, 2021) | Business entity | Maintain general liability insurance of at least $500,000 for damages arising from operating a personal delivery device.Applies when: Any business entity operating a device. | Ongoing | Iowa Code 321O.8 |
| July 1, 2024 | Iowa altered sexual images harassment law (HF 2240, 2024) | Person | Do not disseminate, publish, distribute or post a nude or sexual depiction of a recognizable person, including one created or altered from their image, without consent.Applies when: The person intends to intimidate, annoy or alarm, and the depicted person has not consented to the dissemination. Offenders 18 or older must register as sex offenders. | Ongoing | Iowa Code 708.7(1)(a)(5); 692A.102(1)(a)(6) |
| July 1, 2024 | Iowa created or modified sexual images of minors law (SF 2243, 2024) | Person | Do not knowingly purchase or possess a depiction created, adapted or modified to show an identifiable minor in a prohibited sexual act or its simulation.Applies when: Each minor, and since the 2025 amendment each depiction of the same minor, is a separate offense. The state need not prove the minor's actual identity. | Ongoing | Iowa Code 728.12(3)(a), (b), (e), (f) |
| July 1, 2026 | Iowa prior authorization law, AI provision (HF 2635) | Utilization review organization | Do not use an AI-based algorithm or system as the sole basis to deny, delay or downgrade a prior authorization request for a health care service based on medical necessity.Applies when: A prior authorization request for a health care service based on medical necessity. An AI-based algorithm or system may be used to provide an initial review of a request. | Ongoing | 2026 Iowa Acts, ch. 1087, § 2 (Iowa Code § 514F.8(2A)) |
Starting later 8 duties
Dates further out, in order.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| July 1, 2027 | Iowa conversational AI services law (SF 2417) | Operator | Clearly and conspicuously disclose to minor account holders that they are interacting with AI, by a persistent visible disclaimer, or at each interaction's start and at least every three hours.Applies when: The account holder is a minor (known or reasonably certain to be under 18). | Ongoing | Iowa Code 554J.2(1) |
| July 1, 2027 | Iowa conversational AI services law (SF 2417) | Operator | Do not provide minor users points or similar rewards at unpredictable intervals intended to encourage increased engagement.Applies when: Minor users. | Ongoing | Iowa Code 554J.2(2) |
| July 1, 2027 | Iowa conversational AI services law (SF 2417) | Operator | Institute reasonable measures to prevent sexually explicit visual depictions, statements that the minor should engage in sexually explicit conduct, and sexual objectification of the minor.Applies when: Minor account holders. | Ongoing | Iowa Code 554J.2(3) |
| July 1, 2027 | Iowa conversational AI services law (SF 2417) | Operator | Institute reasonable measures to prevent statements suggesting a human is present: claims of sentience or humanity, simulated emotional dependence on a minor, romantic interaction or sexual innuendo, adult-minor romantic role-play.Applies when: Listed under the minors section; the lead-in does not itself say minor account holders. See open questions. | Ongoing | Iowa Code 554J.2(4) |
| July 1, 2027 | Iowa conversational AI services law (SF 2417) | Operator | Offer minor account holders tools to manage privacy and account settings; offer parents or guardians such tools for minors under 13, and for minor account holders as appropriate.Applies when: Minor account holders; beyond the under-13 rule, parental tools are owed as appropriate based on relevant risks. | Ongoing | Iowa Code 554J.2(5) |
| July 1, 2027 | Iowa conversational AI services law (SF 2417) | Operator | Clearly and conspicuously disclose that the service is AI, by a persistent visible disclaimer or a disclaimer appearing after every three hours of continuous interaction.Applies when: A reasonable individual interacting with the service would believe they are interacting with a human. | Ongoing | Iowa Code 554J.3 |
| July 1, 2027 | Iowa conversational AI services law (SF 2417) | Operator | Adopt protocols for responding to user prompts about suicidal ideation or self-harm, including reasonable efforts to refer the user to crisis providers such as a suicide hotline.Applies when: Any conversational AI service made available to the public. | Ongoing | Iowa Code 554J.4 |
| July 1, 2027 | Iowa conversational AI services law (SF 2417) | Operator | Do not knowingly and intentionally cause or program the service to suggest it is designed to provide professional psychology or behavioral health services requiring an Iowa license.Applies when: Statements that would lead a reasonable individual to that belief; licensure under Iowa Code chapter 154B or 154D. | Ongoing | Iowa Code 554J.5 |
Triggered by an event 1 duty
These apply when something happens, such as a request, an incident or a decision about a person. Each row says what triggers it.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| When triggered | Iowa automated driving system vehicles law (SF 302, 2019) | Owner | After an accident, ensure the vehicle remains at the scene and complies with accident duties where possible, and promptly report the accident to law enforcement.Applies when: Any accident involving a system-equipped vehicle. The vehicle's failures are imputed to the owner. | Each time it happens | Iowa Code 321.517 |
Law by law
Who each law covers, who enforces it, the penalties, whether people can sue and what the text leaves open. Open a law to see it; every line cites its section.
Iowa altered sexual images harassment law (HF 2240, 2024)
1 duty · checked November 15, 2026
HF 2240, 90th General Assembly (2024); 2024 Iowa Acts, ch. 1065; Iowa Code 708.7(1)(a)(5), 692A.102(1)(a)(6). Official text · Full law page
Who it covers
- Person. Any person who, intending to intimidate, annoy or alarm another person, disseminates, publishes, distributes or posts a nude or sexual depiction of that person to which the person has not consented. Iowa Code 708.7(1)(a)(5)
Enforcement
- Enforcer: Criminal prosecution; the act does not name a prosecutor. A web search on November 15, 2026 found no lawsuit or court order against this provision.
- Penalty: Aggravated misdemeanor (harassment in the first degree): fine of $855 to $8,540; imprisonment up to 2 years, a violation of 708.7(1)(a)(5). Iowa Code 708.7(2); 903.1(2)
- Penalty: Sex offender registration, a violator 18 or older. Iowa Code 708.7(1)(a)(5); 692A.102(1)(a)(6)
- Can people sue? The law does not say Iowa Code 708.7
- Time to fix before enforcement: None
What the text leaves open
- The session law's wording on non-consent is garbled (it reads as a knowledge element); the codified 708.7(1)(a)(5) states no separate knowledge element beyond the intent in 708.7(1)(a).
- Whether the 903.1(2) fine and imprisonment both apply depends on sentencing; the section sets a required fine and a maximum term.
- Civil remedies for nonconsensual images under other Iowa law were not reviewed.
Iowa automated driving system vehicles law (SF 302, 2019)
4 duties · checked November 15, 2026
SF 302, 88th General Assembly (2019); 2019 Iowa Acts, ch. 75; Iowa Code 321.514 to 321.519. Official text · Full law page
Who it covers
- Owner. The owner of a system-equipped vehicle (a motor vehicle with an automated driving system) operated on Iowa highways, including driverless-capable vehicles. Iowa Code 321.514(3), (8); 321.516; 321.517
- Human driver. A person in a system-equipped vehicle with a conventional human driver present. Iowa Code 321.515(2)
- On-demand driverless-capable vehicle network. A network that uses an app or other digital means to dispatch driverless-capable vehicles to carry persons or goods. Iowa Code 321.514(6); 321.518
Enforcement
- Enforcer: The Iowa Department of Transportation regulates these vehicles exclusively; accident-duty violations are charged against the owner under Iowa Code 321.261 to 321.273. A web search on November 15, 2026 found no lawsuit or court order against this law.
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Iowa Code 321.514 to 321.519
- Time to fix before enforcement: The law does not say
Exemptions
- The department may exempt a driverless-capable vehicle from state traffic and safety laws it cannot meet; federal or NHTSA exemptions excuse federal standard certification. Iowa Code 321.515(1)(b), (c)
- Political subdivisions may not add requirements or taxes specific to these vehicles, systems or networks. Iowa Code 321.519(2)
What the text leaves open
- Penalties under Iowa Code 321.20B and 321.261 to 321.273 were not read.
- The DOT rules add registration and restriction duties (for example, notice within 30 days of modifying a vehicle to be driverless-capable); they are not mapped as duties because the rule text itself was not read, only the adoption notice.
- The Governor's approval date was not confirmed in this run; the enrolled copy's approval line is blank.
Iowa conversational AI services law (SF 2417)
8 duties · checked November 12, 2026
Senate File 2417 (91st General Assembly, 2026 Session), 2026 Iowa Acts, ch. 1068; adds Iowa Code chapter 554J (554J.1 to 554J.6). Official text · Full law page
Who it covers
- Operator. A person who develops and makes a conversational AI service available to the public. App stores and search engines are excluded when they only provide access to one. Iowa Code 554J.1(4)
Enforcement
- Enforcer: Iowa Attorney General, who has authority to enforce the chapter. The text does not call that authority exclusive.
- Penalty: The greater of actual damages or a civil penalty of $1,000 per violation, not to exceed $500,000 per operator, an operator's violation of the chapter; the operator is also subject to an injunction. Civil penalties go to the state general fund. Iowa Code 554J.6(1), (3)
- Can people sue? No Iowa Code 554J.6(4)
- Time to fix before enforcement: The law does not say
Exemptions
- Not conversational AI services: applications primarily designed and marketed for research and development; features within another application whose primary purpose is not simulating conversation; services limited to a narrow and discrete topic. Iowa Code 554J.1(2)(b)(1)-(3)
- Applications primarily designed and marketed for commercial use by businesses to help customers obtain services or buy goods from that business, and applications a business uses solely for internal purposes. Iowa Code 554J.1(2)(b)(4), (6)
- Speaker and voice command interfaces or voice-activated virtual assistants for widely available consumer electronic devices. Iowa Code 554J.1(2)(b)(5)
- A developer of an AI model is not liable solely because a third party used the model to create or train a conversational AI service. Iowa Code 554J.6(5)
What the text leaves open
- 554J.2(4) sits in the minors section and two of its examples refer to minors, but its lead-in is not expressly limited to minor account holders.
- The minor disclaimer must appear at least once every three hours (554J.2(1)); the general disclaimer must appear after every three hours (554J.3). The wording differs.
- A violation is not defined, so the counting unit for the $1,000 penalty and the $500,000 cap is unclear; so is who receives actual damages when there is no private right of action.
- The Act states only an applicability date of July 1, 2027. It has no separate effective-date clause; Iowa's default effective date for Acts was not read from an official source in this run.
- Whether the attorney general has begun the required chapter 17A rulemaking was not checked.
Iowa created or modified sexual images of minors law (SF 2243, 2024)
1 duty · checked November 15, 2026
SF 2243, 90th General Assembly (2024); 2024 Iowa Acts, ch. 1015; Iowa Code 728.12(3). Official text · Full law page
Who it covers
- Person. Any person who knowingly purchases or possesses a visual depiction of a minor in a prohibited sexual act, including one created, adapted or modified to show an identifiable minor. Iowa Code 728.12(3)(a), (f)
Enforcement
- Enforcer: Criminal prosecution; the act does not name a prosecutor. A web search on November 15, 2026 found no lawsuit or court order against this provision.
- Penalty: Class D felony: up to 5 years; fine of $1,025 to $10,245, a first offense under 728.12(3). Iowa Code 728.12(3)(c); 902.9(1)
- Penalty: Class C felony: up to 10 years; fine of $1,370 to $13,660, a second or subsequent offense, counting prior convictions or deferred judgments, including substantially similar out-of-state offenses. Iowa Code 728.12(3)(c), (d); 902.9(1)
- Can people sue? The law does not say Iowa Code 728.12
- Time to fix before enforcement: None
Exemptions
- Law enforcement officers, court personnel, licensed physicians, licensed psychologists and attorneys acting in their official duties. Iowa Code 728.12(4)
What the text leaves open
- The definition reaches only depictions of identifiable minors; wholly fictional AI-generated images of no real child are not addressed by this section.
- The Iowa Code 2026 history note lists 2025 Acts, ch 50, §1 for 728.12; that this is SF 150 is inferred from SF 150 amending the same paragraph, as no chapter number was seen on the enrolled bill.
- SF 150's effective date was not stated in the enrolled text read; the Iowa Code 3.7 July 1 default would apply absent another date.
Iowa personal delivery devices law (HF 304, 2021)
6 duties · checked November 15, 2026
HF 304, 89th General Assembly (2021); 2021 Iowa Acts, ch. 119; Iowa Code chapter 321O; 321.1(90), 321.519(3), 805.8A(5), (9B). Official text · Full law page
Who it covers
- Business entity. A for-profit entity that operates a personal delivery device: a device of no more than 550 pounds (without cargo) built to carry cargo in pedestrian or supplementary areas, using automated driving technology under remote human supervision. Threshold: Device weight not more than 550 pounds, excluding cargo Iowa Code 321O.1; 321O.3(1)
Enforcement
- Enforcer: Peace officers, including local peace officers, enforce state law on device operation. A web search on November 15, 2026 found no lawsuit or court order against this law.
- Penalty: $100 to $1,000 per violation (simple misdemeanor), missing marker or braking system. Iowa Code 321O.6(3)
- Penalty: $35 scheduled fine (simple misdemeanor), violating the operation rules in 321O.4. Iowa Code 321O.4; 805.8A(9B)(a), added by HF 304 § 12
- Penalty: $45 scheduled fine, expunged if the lamp is fixed within 72 hours, violating the lamp requirement. Iowa Code 321O.6(4); 805.8A(9B)(b), added by HF 304 § 12
- Can people sue? The law does not say Iowa Code 321O.2(3) (injury and damage claims judged under the law that applies to pedestrians)
- Time to fix before enforcement: 3 days (applies only to lamp citations: 72 hours to repair or replace the lamp, after which the citation is expunged)
Exemptions
- A person is not the operator merely by requesting or dispatching a device; an agent acting outside the scope of employment is the operator instead. Iowa Code 321O.3(3), (4)
- The automated driving system sections 321.514 to 321.519 do not apply to devices operated under chapter 321O. Iowa Code 321.519(3), added by HF 304 § 2
What the text leaves open
- The excessive speed fine schedule in Iowa Code 805.8A(5) was not read, so the speed fine is not stated.
- The 805.8A(9B) amounts are from the enrolled bill; the current codified 805.8A was not read.
- Local authorities may ban devices on specific roads or pedestrian areas for safety; local ordinances were not reviewed.
- The Governor's approval date was not confirmed; the enrolled copy's approval line is blank.
Iowa prior authorization law, AI provision (HF 2635)
1 duty · checked November 12, 2026
2026 Iowa Acts, chapter 1087 (H.F. 2635), § 2, adding Iowa Code § 514F.8(2A); enforcement in § 8, adding Iowa Code § 514F.8E. Official text · Full law page
Who it covers
- Utilization review organization. An entity that performs utilization review, including a health carrier that meets accreditation requirements and performs utilization review for its own health benefit plans. Iowa Code 2026 § 514F.8(1)(j)
Enforcement
- Enforcer: Iowa Commissioner of Insurance. Noncompliance with § 514F.8 is remedied under chapters 505 and 507B using the procedures in §§ 507B.6 to 507B.8, and on finding a pattern or practice of noncompliance the commissioner may suspend a utilization review organization's authority to conduct utilization review. A web search on November 12, 2026 found no report of a court order blocking this law; court dockets were not searched.
- Penalty: Up to $1,000 per act or violation, up to $10,000 in total, civil penalty the commissioner may impose after a hearing, alongside the cease and desist order the commissioner must issue. Iowa Code 2026 § 507B.7(1)(a), applied by Iowa Code § 514F.8E (2026 Iowa Acts, ch. 1087, § 8)
- Penalty: Up to $5,000 per act or violation, up to $50,000 in total in any one six-month period, where the person knew or reasonably should have known of the violation. Iowa Code 2026 § 507B.7(1)(a)
- Penalty: Up to $10,000 per act or violation, plus license suspension or revocation, violating a commissioner's order while it is in effect, after notice and hearing. Iowa Code 2026 § 507B.7(4)
- Penalty: Suspension of authority to conduct utilization review (no dollar amount), a commissioner finding of a pattern or practice of noncompliance. Iowa Code § 514F.8E (2026 Iowa Acts, ch. 1087, § 8)
- Can people sue? The law does not say 2026 Iowa Acts, ch. 1087, Divisions I and II (no provision on private lawsuits)
- Time to fix before enforcement: The law does not say
Exemptions
- The definition of health carrier excludes the Department of Health and Human Services and managed care organizations under contract for the medical assistance program (chapter 249A) or Hawki (chapter 514I). Iowa Code 2026 § 514F.8(1)(g)
- Health care services, as defined for this section, exclude prescription drugs and dental care services. Iowa Code 2026 § 514F.8(1)(f)
What the text leaves open
- The act states no effective date for the AI provision; July 1, 2026 is the date shown on the Legislature's bill history page.
- Subsection 2A does not require disclosure of AI use, audits or human review. A separate section of the act (§ 514F.8A) requires a qualified reviewer or clinical peer to make denials and downgrades for requests made on or after January 1, 2027.
- Section 514F.8E also points to remedies in chapter 505, which was not opened.
- Definitions and subsection numbers were read from Iowa Code 2026 § 514F.8, which does not yet show this act's changes; later renumbering is possible.
- The hearing procedure in §§ 507B.6 and 507B.8 was not opened, so any notice steps before a penalty are not described here.
Information, not legal advice. This plan summarizes what the official texts of the laws listed say. It does not decide whether a law applies to your organization; that turns on facts such as your size, your role as a developer or deployer, and how you use AI. Laws change, and courts and regulators can read them differently. Check the official text linked with each duty and talk to a qualified lawyer before acting. Using this page does not create an attorney-client relationship. See our terms of service.
How the plan is built
Each law in the plan was read from its official text, on the legislature’s or state’s own website. 265 of the 326 have also been read a second time to confirm every date, threshold, penalty and enforcer; the rest have had one full read, and each shows the date it was last checked. Each duty is written in plain English in 30 words or fewer and carries the section it comes from, with a link.
Where a law is silent, the plan says so. It does not borrow a penalty from another statute or guess at a deadline. A law that is repealed or replaced on a known date shows that end date, and its duties leave the plan once the date passes. The date each law was last checked appears with it.
The plan is built fresh from these records every time the page loads, so it changes as soon as a law is added or re-checked. To report an error, use the corrections page. For how we find laws and decide what counts as an AI law, see our methodology. If you are not sure which laws touch your business at all, start with Am I Affected?
Common questions
What does an AI compliance plan cover?
Each duty an enacted state AI law places on a business or other regulated party: who it applies to, what it requires, when it starts, how often it recurs, who enforces it, the penalties and whether people can sue. The builder covers 1,235 duties in 326 enacted laws across 50 states, and every duty links to the section of law it comes from.
Where does the information come from?
From the official text of each law: the enrolled bill, session law or codified statute, opened on the legislature's or state's own website. 265 of the 326 laws have also been read a second time to confirm every date, threshold, penalty and enforcer, and the date each law was last checked is shown with it. Where a law is silent on a point, such as a penalty amount, the plan says the law does not say rather than filling the gap. Law firm summaries and news reports are never used as sources.
Does the plan include every AI law in a state?
Not yet. It includes the enacted laws we have mapped duty by duty. When you choose a state, its other enacted AI laws are listed separately with links, so nothing is left out of view. New laws are added as they are read. When a law is repealed or replaced on a set date, its duties show that end date and leave the plan once it passes.
How do I know which duties apply to my company?
Start with the 'who it covers' entry for each law: many apply only above a size or revenue threshold, only to developers or only to deployers, or only in one industry. The plan quotes those conditions from the text. Whether your company meets them depends on facts only you and your counsel know.
Is this legal advice?
No. It is information drawn from official legal texts, organized so you can see what each law requires. Use it to brief your team and your lawyers, not in place of them.
What does Pro add?
The same plan as a CSV file for spreadsheets and audit files, and as a calendar file (.ics) with every dated duty as an event that links back to the law. Both are built from the states and uses you pick. The plan on this page, and printing it, are open to everyone.