Iowa AI Laws and Regulation (2026)

Iowa does not have a single comprehensive artificial intelligence law. Instead, the state addresses AI through a combination of targeted legislation, executive policy, and existing consumer protection and employment statutes. As of March 2026, Iowa has enacted deepfake-specific criminal laws, issued a statewide generative AI policy for government use, and has several AI-related bills moving through the 91st General Assembly.

This guide covers every enacted Iowa AI law and pending bill, along with how federal AI policy affects Hawkeye State residents and businesses.

This article is for informational purposes only and does not constitute legal advice. Consult a licensed Iowa attorney for guidance on specific situations.

Iowa's Enacted Deepfake Laws

Iowa's most significant AI-related legislation targets deepfakes. In 2024, the Iowa General Assembly passed two bills unanimously, both signed into law and effective July 1, 2024.

SF 2243: AI-Generated Sexual Content Involving Minors

Senate File 2243 added criminal penalties for synthetic media depicting minors in sexually explicit situations. The law updated Iowa's existing child exploitation statutes to ensure that AI-generated depictions receive the same legal treatment as traditional forms of child sexual abuse material (CSAM).

Under SF 2243, creating, distributing, or possessing AI-generated sexual content involving minors carries the same penalties as existing CSAM offenses under Iowa Code. This includes felony charges that can result in significant prison sentences.

The bill passed both chambers unanimously, reflecting bipartisan consensus that AI-generated exploitation material causes real harm regardless of whether a real child was depicted.

HF 2240: Non-Consensual Synthetic Intimate Images

House File 2240 created penalties for distributing non-consensual synthetic intimate content of adults. This law closed gaps in Iowa's existing privacy and harassment statutes by specifically addressing AI-generated intimate imagery.

Under HF 2240, distributing a synthetic intimate image of someone without their consent is a criminal offense. The law applies whether the image was created using AI deepfake technology, photo manipulation, or any other digital tool that produces realistic but fabricated intimate imagery.

Both SF 2243 and HF 2240 align Iowa with the growing number of states that treat AI-generated exploitative content as equivalent to non-synthetic versions under criminal law.

Federal Deepfake Law: The TAKE IT DOWN Act

In addition to Iowa's state laws, the federal TAKE IT DOWN Act signed by President Trump makes it a federal crime to publish or threaten to share non-consensual intimate images, including AI-generated deepfakes. The law requires social media platforms to remove such content within 48 hours of being notified by a victim, adding a second layer of protection for Iowa residents.

Iowa's Generative AI Policy for State Government

The Iowa Department of Management issued an Enterprise Generative Artificial Intelligence Policy with an effective date of March 31, 2025. This interim policy establishes minimum requirements and prohibited uses for all state agencies and supported entities.

Key Requirements Under the Policy

The state AI policy includes several mandatory provisions for government employees and contractors.

Human review is required. Before finalizing any AI-generated output, state employees must subject it to thorough human evaluation. AI-generated content cannot be used verbatim, treated as the sole source of reference, or used as the sole basis for final business decisions.

Protected data restrictions apply. Sensitive and protected data must not be used to train an AI tool, submitted into an AI system, or utilized by an AI tool without prior written authorization from the Department of Management.

AI-generated code must be marked. If AI is used to write any portion of code for state systems, that section must be clearly marked with comments noting where AI-created code starts and stops. AI-generated code cannot be protected with intellectual property rights.

Human fallback systems are mandatory. If AI tools fail or do not meet business needs, state agencies must have human fallback systems in place to ensure continuity of services.

Prohibited Uses

The policy expressly prohibits the use of freely available AI tools by state agencies without prior written approval from the Department of Management. This means state employees cannot use consumer-facing tools like ChatGPT or Google Gemini for work purposes unless specifically authorized.

Pending AI Legislation in the 91st General Assembly

The 2025-2026 legislative session has produced several AI-related bills that could significantly shape Iowa's regulatory landscape.

HSB 294: Election AI Disclosure and Algorithmic Discrimination

House Study Bill 294 is a two-part bill addressing AI in elections and algorithmic discrimination.

Division I: Election Materials. The bill would require that any published material generated using AI and designed to advocate for or against a candidate or ballot issue must include a disclosure stating: "this material was generated using artificial intelligence." A person who willfully violates this requirement would be guilty of a serious misdemeanor.

Under Iowa law, a serious misdemeanor is punishable by up to one year in jail and a fine of between $430 and $2,560.

Division II: Algorithmic Discrimination. The bill also defines algorithmic discrimination as any use of an AI system that results in unfavorable treatment based on an individual's actual or perceived age, race, creed, color, sex, sexual orientation, national origin, religion, or disability. This provision would create a framework for addressing bias in automated decision-making systems.

The bill defines "artificial intelligence" as a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments.

SSB 3014: Limiting AI in State Employment Decisions

Senate Study Bill 3014 would restrict how state agencies use AI in employment-related decisions. The bill includes several key provisions.

AI employment decisions prohibited. State agencies would be prohibited from using AI in matters that affect an employee's employment status, bargaining rights, wages, transfers, or eligible hours.

AI inventory requirement. State agencies would be required to establish and maintain an inventory of AI systems they use.

Public disclosure mandated. Agencies would need to publish a list of automated employment decision-making tools on their websites within 90 days of first using each tool.

Annual reporting. Each agency would submit an annual report on AI usage to the General Assembly by January 1.

The bill advanced from a subcommittee in January 2026. Labor unions representing state employees registered in favor of the bill, while technology groups and business entities expressed interest without taking a formal position.

HSB 766: Autonomous AI in Healthcare

House Study Bill 766 would create a licensing system for providers of autonomous AI medical services. This bill is notable because it would allow AI systems to operate without direct human supervision in healthcare settings.

The bill defines "fully autonomous AI" as artificial intelligence authorized to diagnose, treat, or prescribe without the need for human supervision or intervention. It would create a new licensing category for AI-augmented and autonomous service providers.

Proponents argue that autonomous AI could help close healthcare gaps in underserved and rural areas of Iowa. The Cicero Institute, a conservative policy think tank, provided the model legislation and testified in support.

Opponents, including the Iowa Independent Physician Group, have raised concerns about the lack of physician oversight and argue that existing professional licensing boards already have regulations that evolve with medical technology.

The bill was actively moving through the legislature as of March 2026.

SSB 3118: AI in Insurance Prior Authorization

Senate Study Bill 3118 addresses the use of artificial intelligence by utilization review organizations in prior authorization decisions. The bill regulates how health insurers and their review organizations can use AI when determining whether to approve, deny, or modify healthcare services.

Key provisions include restrictions on AI-only decisions for prior authorization, requirements for human review of AI-generated denial decisions, and new rules around prepayment audits. The bill passed both chambers and became law as of February 5, 2026.

HSB 643: AI in Election Materials

House Study Bill 643 would further limit AI use in election materials and advanced out of a House subcommittee in early 2026. This bill complements HSB 294 by providing additional guardrails around the use of AI-generated content in political campaigns.

How Existing Iowa Law Applies to AI

While Iowa lacks a comprehensive AI statute, several existing laws affect how AI systems operate within the state.

Consumer Protection

Iowa's Consumer Fraud Act (Chapter 714H) prohibits unfair and deceptive business practices. This broad prohibition applies to AI-driven business practices that mislead consumers, including deceptive AI chatbots, AI-generated fake reviews, or AI systems that make false claims about products or services.

Consumers who suffer ascertainable losses from deceptive AI practices can bring private actions under Chapter 714H to recover actual damages and attorney's fees.

Employment Discrimination

Iowa's Civil Rights Act (Chapter 216) prohibits employment discrimination based on protected characteristics. When employers use AI tools for hiring, promotion, or termination decisions, those tools must comply with existing anti-discrimination requirements.

If an AI hiring tool produces disparate impact on protected groups, the employer faces liability under the same framework that applies to human-made decisions. The Iowa Civil Rights Commission has enforcement authority over these claims.

Data Privacy

The Iowa Consumer Data Protection Act (ICDPA), which took effect January 1, 2025, gives consumers rights over their personal data. While the ICDPA does not specifically address AI, it applies to AI systems that process consumer data.

Under the ICDPA, consumers have the right to access, delete, and opt out of the sale of their personal data. AI systems that collect and process personal data must comply with these requirements, including providing clear privacy notices and honoring consumer requests.

How Federal AI Policy Affects Iowa

Federal AI policy creates additional layers of regulation that apply in Iowa alongside state law.

Executive Orders and Agency Guidance

President Biden's Executive Order 14110 on AI safety, issued in October 2023, directed federal agencies to develop AI standards and safety testing requirements. While the Trump administration has shifted federal AI policy toward a lighter regulatory approach, many of the testing and reporting requirements established under EO 14110 continue through agency-level implementation.

FTC Enforcement

The Federal Trade Commission has actively enforced against deceptive AI practices using its existing Section 5 authority. The FTC has warned companies against making unfounded claims about AI capabilities, using AI to generate fake reviews, and deploying AI in ways that cause substantial consumer harm. These federal enforcement actions apply to businesses operating in Iowa.

Sector-Specific Federal Rules

Iowa businesses in regulated industries face additional AI requirements from federal agencies. Financial institutions must comply with fair lending requirements when using AI for credit decisions. Healthcare providers using AI diagnostic tools must meet FDA clearance requirements. Employers using AI hiring tools must ensure compliance with EEOC guidance on algorithmic fairness.

Iowa AI Use in Government Operations

Beyond regulating AI, Iowa has been an early adopter of AI tools in government operations.

Legislative AI Tools

The Iowa Legislature used an AI program during its 2025 session to help lawmakers track and evaluate bills, becoming one of the first state legislatures to deploy AI for legislative analysis. The tool helped legislators and staff manage the volume of bills introduced each session.

Attorney General's Office

Iowa Attorney General Brenna Bird has been vocal about deepfake dangers, particularly regarding risks to students. The AG's office has issued consumer warnings about deepfake scams and provides guidance on how parents can protect children from AI-generated exploitation material.

Penalties Summary

Law	Violation	Classification	Penalty
SF 2243	AI-generated CSAM involving minors	Felony (same as existing CSAM laws)	Significant prison time, sex offender registry
HF 2240	Non-consensual synthetic intimate images	Criminal offense	Varies by severity
HSB 294 (pending)	Undisclosed AI election materials	Serious misdemeanor	Up to 1 year jail, $430-$2,560 fine
Chapter 714H	Deceptive AI business practices	Civil	Actual damages plus attorney's fees
SSB 3118 (enacted)	AI-only prior authorization denials	Regulatory violation	Subject to insurance regulatory enforcement

Looking Ahead: Iowa's AI Regulatory Future

Iowa's approach to AI regulation is evolving rapidly. The 2025-2026 legislative session shows growing interest in addressing AI across multiple sectors, from healthcare to employment to elections. Key trends to watch include the following.

The autonomous AI healthcare bill (HSB 766) could make Iowa one of the first states to create a formal licensing framework for AI medical providers. The election disclosure bill (HSB 294) reflects a nationwide trend toward requiring transparency when AI generates political content. The state employment AI bill (SSB 3014) indicates growing concern about AI replacing human judgment in workplace decisions.

Iowa's Technology Association has established an AI Policy Subcommittee to guide the state's innovation future, signaling that the private sector is also preparing for increased regulation.

More Iowa Laws

• Iowa Data Privacy Laws
• Iowa Data Breach Notification Laws
• Iowa Biometric Privacy Laws
• Iowa Surveillance Camera Laws
• Iowa Background Check Laws
• Iowa Whistleblower Laws
• Iowa Sexting Laws