SF 262 signed into law Iowa became sixth US state with comprehensive privacy law. It applies to companies that do business in Iowa and either control or process personal data of at least 100000 Iowans or derive 50 percent gross revenue from personal data sales.