Sovereignware Archive of record · est. 2026

Ratings / Privacy Law

Iowa Consumer Data Protection Act (ICDPA)

Critical   Rating 1 / 5 · Critical — Active surveillance / serious risk.

Claim evaluated

The ICDPA is rated RED as it is one of the weakest state privacy laws passed in the United States. Unlike stronger statutes, it denies consumers the fundamental rights to correct inaccuracies in their collected personal data or to restrict automated profiling. With zero private r

Analysis

The ICDPA is rated RED as it is one of the weakest state privacy laws passed in the United States. Unlike stronger statutes, it denies consumers the fundamental rights to correct inaccuracies in their collected personal data or to restrict automated profiling. With zero private right of action, no rulemaking authority for a dedicated regulator, and an extraordinarily generous 90-day cure period for non-compliant businesses, the law acts more as a rubber stamp for industry data practices than a consumer protection mechanism.

Sources

Rating Grade Card

The full methodological and legal context for this rating. This card is what we point to when asked to substantiate the claim.

Rating IDark_intel_f8677249
SubjectIowa Consumer Data Protection Act (ICDPA)
CategoryPrivacy Law
VerdictThreat — red
Beacon stateCritical
Analyzed2026-06-05
AnalystHecTec Labs · Embassy reconnaissance (Gemini grounded search)
ApprovalManual review · YubiKey + steward (Citadel)
Data basisPublicly reported information only
Claim framingOpinion based on cited sources, not a statement of intent
Ingest originlocal_embassy
Citadel signaturesecp256k1_m4_sig_038e41609afe03f0252574ca55f3b158
Right of replySubmit a response →
Disclaimer. This rating reflects publicly available information as of 2026-06-05. Conditions, policies, ownership, and product behavior may change after publication; re-verify before relying on this rating. The verdict expressed here is an opinion formed from the cited sources and is not a statement of fact about the subject's intent.