Iowa — Generative Artificial Intelligence (AI) Policy (ENTERPRISE PY-AI)
Iowa · Generative Artificial Intelligence (AI) Policy (ENTERPRISE PY-AI)
Iowa's enterprise generative-AI policy, issued under Iowa Administrative Code 129-8.4(8B), sets minimum requirements and prohibited uses for generative AI, mandating human review of AI outputs and disclosure of AI-generated code.
Technical detail
Iowa's enterprise generative-AI policy, issued under Iowa Administrative Code 129-8.4(8B), sets minimum requirements and prohibited uses for generative AI, mandating human review of AI outputs and disclosure of AI-generated code.
Who is protected: Residents interacting with state government AI systems; public-sector data subjects.
Who must comply: All Supported-Entity workforce members (employees and contractors) and third parties performing work on behalf of Iowa state agencies
Key facts
| Jurisdiction | Iowa |
|---|---|
| Level | State |
| Status | In effect |
| Protection strength | Limited protection |
| Effective date | 2025-03-31 |
| Citation | Generative Artificial Intelligence (AI) Policy (ENTERPRISE PY-AI) |
| Topics | government use of AI · AI disclosure and transparency · automated decision-making · consumer data privacy |
| Last verified | 2026-07-01 |
| Official source | State of Iowa Department of Management - Generative Artificial Intelligence (AI) Policy, ENTERPRISE PY-AI ↗ |
More AI rules in Iowa
- Iowa Synthetic Intimate Content Law · In effect
- Iowa AI CSAM Law · In effect
- Iowa Consumer Data Protection Act · In effect
- Iowa SF 2417 (Conversational AI Safety Act) · Enacted (not yet in effect)
- Iowa HF 2635 (no AI-only prior-auth denials) · Enacted (not yet in effect)
- Attorney General Brenna Bird Warns of Deepfake Dangers as St · In effect
Related government use of AI rules elsewhere
- Office of Artificial Intelligence Oversight · Proposed / pending
- AI Gendered Impact Assessment + Interagency Taskforce · Proposed / pending
- NYC resolution urging NY State to pass Advanced AI Licensing Act (A.3356) · Status unknown
- Emergency 365-day moratorium on new data centers (>20 MVA) · In effect
- Resolution setting Seattle data-center impact-study framework · In effect
- Six-month moratorium on data centers >350,000 sq ft (Minneapolis) · In effect
See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.