Last month, Iowa followed Connecticut, Utah, Virginia, Colorado, and California to become the sixth U.S. state to pass a comprehensive data privacy law.

The Iowa Consumer Data Protection Act (ICDPA) will go into effect on Jan. 1, 2025. While parts of the law are similar to the other state privacy laws (particularly Utah’s), there is still a lot companies need to do to comply.

Associate Melanie Notari and I break down the new law in a recent OneTrust DataGuidance article.