IowaHF 102891st General Assembly (2025–2026)House

A bill for an act relating to matters under the purview of the department of management, and including effective date and applicability provisions. (Formerly HF 756, HSB 72.) Effective date: 07/01/2026, 07/01/2027. Applicability date: 07/01/2026.

Sponsored By: COMMITTEE ON APPROPRIATIONS

Signed by Governor

Personalized for You

How does this bill affect your finances?

Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.

Free to download

Bill Overview

Analyzed Economic Effects

9 provisions identified: 2 benefits, 1 costs, 6 mixed.

Vendors must protect Iowa state data

Covered contracts entered into or renewed on or after July 1, 2026, treat state data as the state's exclusive property. Vendors may use it only for contracted services and must follow state data-protection policies. Aggregated or deidentified information used for internal analysis is excluded from the state-data definition. On request, vendors must provide a current digital copy in a format the state accepts. After the contract ends, vendors must permanently delete state data once the state has a copy. They may keep data when required by law, a grant, or another government requirement.

Iowa ranks projects and extends technology funding

Beginning July 1, 2026, the Department of Management directs technology fund money toward new projects and replacement infrastructure, with privacy protections. Unused money remains available through the fiscal year ending two years after its original funding year; earnings stay in the fund. The department ranks projects by state goals, innovation, readiness, management of changes, expected value, statewide use, long-term support, and rural access. It also considers whether projects replace infrastructure or cover maintenance. The governor uses the rankings for budget recommendations starting with the year beginning July 1, 2027; ranking does not guarantee funding. The department reports project status, costs, funding, and completion timelines to lawmakers by January 15 each year.

Iowa ends yearly technology fund payment

Beginning July 1, 2026, Iowa ends an annual $17.5 million general fund payment to the Technology Reinvestment Fund. The payment was scheduled for the budget year starting July 1, 2026, and each year afterward. This removes a recurring funding source, not the technology fund itself. The law does not specify resulting changes to household services, costs, or taxes.

Iowa centralizes criminal justice data analysis

Beginning July 1, 2026, the Department of Management serves as Iowa's Statistical Analysis Center, consolidating earlier analysis duties. It may link agency data to study criminal justice and track juveniles and adults charged with crimes across programs. Required record access covers courts, abuse reports, child welfare, criminal history, corrections, parole, probation, fines, and restitution. Federal restrictions and existing confidentiality rules still apply; Public Safety intelligence data and peace officer investigation reports are excluded. The work supports government studies, legislative reviews, minority impact statements, and annual prison population forecasts. The department must use existing databases when practical and may limit implementation when money or resources are insufficient.

Iowa shields cybersecurity incident communications

Beginning July 1, 2026, security-incident communications involving Iowa's chief information security officer, and documents created from them, are confidential. They generally cannot be released through public-records requests or used in proceedings. The officer may disclose information for specified cybersecurity, safety, law-enforcement, and confidential governor or legislator briefings. A proceeding may use the information under an order barring further disclosure and requiring sealed filings.

More frequent checks for technology workers

Beginning July 1, 2026, covered workers face national criminal history checks at least every five years, instead of every 10. This covers people working for the Department of Management and technology staff at supported entities, not all Iowa residents. An additional check may be requested when the department or supported entity has reason to believe a worker has a criminal conviction. The department pays actual fingerprinting and national-check costs unless a contract says otherwise. Background investigation results are not public records.

Record requests go to responsible agencies

Beginning July 1, 2026, the Department of Management must deny requests for records it only processes or stores for another agency. It must direct requesters to the agency legally responsible for those records and help that agency produce them. Its decision is presumed valid unless challenged with clear and convincing evidence. For subpoenas seeking those records, the department must notify the responsible agency and attorney general's office and help resist the subpoena.

Iowa raises agency transfer limits with safeguards

Beginning July 1, 2026, annual transfers into a non-entitlement budget line may reach 100% of its enacted amount, up from 50%. Transfers require the governor's approval, the same funding source, and the same fiscal year. They also remain subject to a 0.1% limit based on total appropriations from that funding source for the year. Transfers into non-entitlement lines are barred during the legislature's regular session. Entitlement lines include the State Public Defender, foster care, State Supplementary Assistance, Medical Assistance, and the Family Investment Program. Separately, agencies cannot treat appropriations with unspecified dollar amounts as excess money available for transfer, even when otherwise unlimited. These rules change agency funding flexibility, not household benefit eligibility.

Stronger safeguards in Iowa technology contracts

Covered state technology contracts entered into or renewed on or after July 1, 2026, must use Iowa law and Iowa courts. Prohibited terms are void, including secret pricing, binding arbitration, jury-trial waivers, unknown or one-sided term changes, and state promises to cover vendor liability. Restrictions also cover specified charges, taxes, insurance duties, intellectual-property terms, claim limits, and shifting risk before delivery. The director may allow liability caps after considering the public interest and ways to reduce risk. Caps must apply equally and cannot fall below the full contract value, including all possible extensions. They cannot erase cybersecurity liability or limit liability for intentional wrongdoing, criminal fraud, death or injury, intellectual-property violations, preset damages, compliance, confidentiality, or indemnification duties. These rules cover state contracts, not ordinary household contracts.

Sponsors & Cosponsors

Sponsor

COMMITTEE ON APPROPRIATIONS
Affiliation unavailable

Cosponsors

There are no cosponsors for this bill.

Roll Call Votes

All Roll Calls

Yes: 266 • No: 4

Senate vote • 4/30/2026

Passed Senate

Yes: 44 • No: 0

House vote • 4/1/2026

Passed House

Yes: 90 • No: 2

Senate vote • 5/13/2025