To answer this question, please select “yes” if you control or process the personal information of 25,000 or more residents of Iowa per year or select “no” if you do not control or process the personal information of 25,000 or more residents of Iowa per year. 


“Personal information” is generally defined as any information that could be used to identify a particular person or any information that relates to an identified person. Examples of personal information include: 

  • Name; 

  • Email; 

  • Physical address; 

  • Phone number; or 

  • IP address. 


Websites and applications will usually collect personal information through features such as: 

  • Contact forms; 

  • Email newsletter sign up forms; 

  • Analytics features (e.g. Google Analytics); 

  • eCommerce; 

  • Advertising (e.g. Facebook Pixel). 


“Controlling” means determining the purpose and means of processing the personal information. For example, if you determine whether individuals are added to an email marketing list or whether a contact form inquiry will be responded to, then you are controlling the personal information submitted to your website or application. 


“Processing” means an operation or set of operations performed on personal information including collection, use, storage, disclosure, analysis, deletion, or modification of personal information. For example, if you collect personal information, then you are processing personal information. 


Related privacy laws 

Iowa SF262