Iowa Code § 8.93
This is the official text of Iowa Code § 8.93, part of Iowa’s Code — part of the compiled statutory law of Iowa, published by the state as "Code." Browse the sections below, each linked to its official government source.
Not legal advice. This page reproduces the official text of a government statute for reference only. Laws change, and how a statute applies depends on your specific facts. For advice about your situation, consult a licensed attorney in your state.
Cybersecurity.
Official statutory text
(1) It is the intent of the general assembly that state and local governmental entities work collaboratively in a whole-of-state approach to protect against cybersecurity risks and threats to information systems owned or operated by, or on behalf of, state and local governmental entities. State and local governmental entities shall take steps to modernize their approach to cybersecurity, including by adopting cybersecurity best practices wherever possible.
(2) A state or local governmental entity that complies with chapter 554G by implementing a cybersecurity program, as described in chapter 554G, shall be deemed a covered entity, as defined in section 554G.1.
(3) The department shall establish a cybersecurity reporting function for local governments. The cybersecurity reporting function must include but is not limited to all of the following capabilities:
(3) (a) A hotline available continuously for local government reporting of cybersecurity incidents resulting in system outages or data breaches.
(3) (b) A method for the reporting of local government cybersecurity protections including the presence of multifactor authentication, event logging, use of data encryption at rest and in transit, the ability to reconstitute systems in the event of data loss, use of the “.gov” internet domain, and related cybersecurity practices.
(4) The department is authorized to provide support to all state and local governmental entities in furtherance of this section, in accordance with fee schedules established by the department. The department may retain fees collected under this subsection in a fund created under section 8.92.
(5) The department is authorized to establish a grant program to support local governments and political subdivisions of the state in addressing cybersecurity for information systems owned or operated by, or on behalf of, state, local, or tribal governments. Contingent on a specific appropriation by the general assembly, the department may award grants to local governments and political subdivisions of the state under the program for such purposes. The department may establish criteria for grant program priorities, as well as policies and procedures relating to the program.
2024 Acts, ch 1185, §45
(2) A state or local governmental entity that complies with chapter 554G by implementing a cybersecurity program, as described in chapter 554G, shall be deemed a covered entity, as defined in section 554G.1.
(3) The department shall establish a cybersecurity reporting function for local governments. The cybersecurity reporting function must include but is not limited to all of the following capabilities:
(3) (a) A hotline available continuously for local government reporting of cybersecurity incidents resulting in system outages or data breaches.
(3) (b) A method for the reporting of local government cybersecurity protections including the presence of multifactor authentication, event logging, use of data encryption at rest and in transit, the ability to reconstitute systems in the event of data loss, use of the “.gov” internet domain, and related cybersecurity practices.
(4) The department is authorized to provide support to all state and local governmental entities in furtherance of this section, in accordance with fee schedules established by the department. The department may retain fees collected under this subsection in a fund created under section 8.92.
(5) The department is authorized to establish a grant program to support local governments and political subdivisions of the state in addressing cybersecurity for information systems owned or operated by, or on behalf of, state, local, or tribal governments. Contingent on a specific appropriation by the general assembly, the department may award grants to local governments and political subdivisions of the state under the program for such purposes. The department may establish criteria for grant program priorities, as well as policies and procedures relating to the program.
2024 Acts, ch 1185, §45
Status: in_force · Read it on the official government site
Need a lawyer in Iowa?
Find a Iowa lawyer
About this page: Statute text is reproduced from official government publishers via the
Open US Law dataset
(Vaquill AI, snapshot v2026.08, CC BY 4.0). Primary legislative text like this is public domain under the government-edicts doctrine
(Georgia v. Public.Resource.Org, 2020). We link every section back to its official source so you can verify it independently.