Iowa AI Legislation in 2026

The Iowa Picture

Iowa has chosen a narrow, harm-specific path on artificial intelligence rather than a sweeping regulatory framework. As of June 2026 there is no Iowa equivalent of a comprehensive AI accountability act and no statutory statewide AI task force. Instead, the state legislated where concrete harms were undeniable. Senate File 2243, in effect since July 2024, made Iowa one of the early states to criminalize AI-generated and AI-altered child sexual abuse material by folding synthetic depictions of identifiable minors into existing felony sexual exploitation statutes. Senate File 2417, signed in spring 2026 and effective July 1, 2027, is the more consequential signal. It is Iowa's first law that regulates AI products directly rather than only punishing people who misuse them, and it focuses squarely on protecting minors interacting with conversational AI.

For builders and operators of conversational AI, SF 2417 sets real engineering obligations with a runway to comply. Any publicly available service that simulates human conversation must, before July 2027, ship persistent disclosure to minor users, suppress claims of being human or sentient, prevent simulated emotional dependence and romantic or sexual content with minors, provide parental control tools for users under 13, and route self-harm and suicidal ideation prompts to crisis resources. My read is that companies should treat these as baseline product requirements now, because Iowa's definitions are broad enough to capture general-purpose assistants and AI companions alike, and the law carries penalties.

On data and profiling, Iowa is deliberately light touch. The Iowa Consumer Data Protection Act, SF 262, took effect January 1, 2025 and is now live, but it is the most business-favorable of the comprehensive state privacy laws. It grants access, deletion, and sale opt-out rights, yet it pointedly does not give consumers a right to opt out of profiling or automated decision-making and does not include a right to correct data. Businesses deploying AI-driven profiling or targeted advertising in Iowa therefore face disclosure and notice duties, but not the profiling opt-out and impact-assessment burdens found in Colorado or Connecticut. This is a competitive consideration for AI firms choosing where to operate.

Election integrity is the open front. As of June 2026 Iowa has not enacted a synthetic media disclosure law for political advertising, though the Iowa Ethics and Campaign Disclosure Board has actively pushed for one. House Study Bill 643 and the stronger Senate companion SF 2166 advanced through committee stages but had not become law. My guidance to executives is to plan for an Iowa election deepfake disclosure mandate landing in a future session, modeled on the board's synthetic media formulation, while recognizing that for now no such requirement is binding in Iowa.