United States · Iowa

Iowa AI laws: what's in force, and what's coming

Iowa has no comprehensive AI statute; in 2026 it enacted a conversational AI (chatbot) law with protections for minors, applying from July 2027, and limits on insurers using AI as the sole basis to deny prior authorization. Earlier, a 2024 law made posting sexually explicit altered (deepfake) images of a person a form of harassment; election deepfake bills have repeatedly failed.

Start free Open the Console

ApproachSector-specific AI laws

Enacted AI laws3

In force2

Checked21 Oct 2026

01 / State law

Iowa's AI laws

Law	Citation	Status	Effective	What it covers
Conversational AI services	SF 2417 (91st GA, 2026), Acts Chapter 1068; new Iowa Code ch. 554J	Enacted, effective later	1 Jul 2027	Operators of public conversational AI services must disclose AI to minor account holders, add minor protections, and not imply licensed behavioral health services; AG enforces, $1,000 per violation up to $500,000 per operator.
Utilization review: AI in prior authorization	HF 2635 (91st GA, 2026), Acts Chapter 1087; amends Iowa Code 514F.8	In force		Utilization review organizations may use AI for initial prior authorization review but may not use it as the sole basis to deny, delay or downgrade a medical-necessity request.
Harassment by altered sexual depictions (deepfakes)	HF 2240 (90th GA, 2024), Acts Chapter 1065	In force		Makes disseminating or posting an image altered to falsely depict a person nude or in a sex act a form of harassment with criminal penalties.

Optional evidence · where Planisphere fits

Keep a record anyone can check

When your team meets a duty, Planisphere can seal the event it reports as a receipt.

01 · Your teamRecord the event

A disclosure shown, a review signed, a model change approved: the event your system reports.

02 · PlanisphereSeal it

The event becomes a sealed receipt, dated and attributed to whoever is signed in.

03 · AnyoneCheck it

Paste the receipt into Verify. No account or key.

A record supports your compliance evidence process. It is not a legal finding or a certification. Systems that call Planisphere's gate API can also hold or refuse an action before it runs.

SOURCES