On March 29, 2023, Iowa Gov. Kim Reynolds signed into law Senate File 262, the Iowa Act Relating to Consumer Data Protection (ICDPA). Taking effect nearly two years from now on January 2025, the ICDPA makes Iowa the sixth state to enact a comprehensive data privacy law. In many ways, the new law parallels the Utah Consumer Privacy Act (UCPA) and the Virginia Consumer Data Protection Act (VCDPA), which are generally considered more business-friendly and less restrictive than the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA) and the California Consumer Privacy Act (CCPA) (as amended by the California Privacy Rights Act (CPRA)). .