Title XIII, COMMERCE (Ch. 505 - 554I)

1. A covered entity seeking an affirmative defense under this chapter shall create, maintain, and comply with a written cybersecurity program that contains administrative, technical, operational, and physical safeguards for the protection of both personal information and restrict…

1. A covered entity’s cybersecurity program, as described in section 554G.2 , reasonably conforms to an industry-recognized cybersecurity framework for purposes of section 554G.2 if any of the following are true: a. (1) The cybersecurity program reasonably conforms to the current…

This chapter shall not be construed to provide a private right of action, including a class action, with respect to any act or practice regulated under this chapter . 2023 Acts, ch 63, §4

1. “Ammunition” means the same as defined in 18 U.S.C. §921 . 2. “Covered entity” means an entity, or agent of an entity, that establishes a relationship with a retailer for the purpose of processing credit, debit, or prepaid transactions. 3. “Firearm” means the same as defined i…

1. A payment card network shall not require, incentivize, or permit the use of a merchant category code in a manner that distinguishes a firearms retailer from other retailers. 2. A covered entity, or a covered entity’s agent, shall not assign a firearms retailer a merchant categ…

1. Except for records kept during the regular course of a criminal investigation or criminal prosecution, or as otherwise required by law, a person, unit of government, or governmental organization shall not knowingly and willfully keep or cause to be kept a record or registry of…

1. The attorney general shall investigate reasonable alleged violations of this chapter . As part of the investigation, and in accordance with the Iowa rules of civil procedure, the attorney general may issue a subpoena for the production of records. If a person, unit of governme…

As used in this chapter , unless the context otherwise requires: 1. “Authorized entry” means authorization to enter an event based solely on the ticket holder’s possession of a ticket not obtained in violation of section 554I.2 . “Authorized entry” does not mean authorization to …

A person shall not use or create a bot to do any of the following: 1. Purchase tickets in excess of the posted limit for any one internet ticket sale. 2. Use multiple internet protocol addresses, purchaser accounts, or electronic mail addresses to purchase tickets in excess of th…

1. Upon the attorney general’s request, a ticket seller shall report violations of this chapter of which the ticket seller has actual knowledge to the attorney general within five calendar days of the request. 2. An individual that has actual knowledge of a violation of this chap…

A violation of section 554I.2 is an unfair practice under section 714.16 and under chapter 714H . 2025 Acts, ch 126, §4 NEW section