Camera-related state law

The governing audio statute is Iowa Code 808B.2, which makes intentional interception of wire, oral, or electronic communications a felony unless a party to the communication consents. Iowa is a one-party consent state for audio recording.

Video-only surveillance of common areas with posted notice is generally lawful. Iowa Code 709.21 (invasion of privacy) reaches hidden cameras in places where privacy is reasonably expected. Posted notice at the entrance is the industry standard.

Security business licensing

The Iowa Department of Public Safety regulates private investigative agencies and private security business operators under Iowa Code Chapter 80A and Iowa Admin. Code 661-121. Companies providing security services for compensation must hold a current state license. Local jurisdictions add alarm permits and registration requirements.

Biometric data and the ICDPA

The Iowa Consumer Data Protection Act (Iowa Code 715D) took effect January 1, 2025. ICDPA applies to controllers conducting business in Iowa or producing products targeted to Iowa residents above defined thresholds. The Act classifies biometric data as sensitive data and requires consent before processing.

For commercial security buyers, the practical reach is fingerprint and facial-recognition access control. ICDPA compliance requires consent, privacy notice, consumer-rights handling, and a data protection assessment for sensitive processing. Enforcement is by the Iowa Attorney General; there is no private right of action. ICDPA is generally less restrictive than CCPA, VCDPA, or CTDPA.

Privacy in the workplace

Iowa does not have a single workplace electronic-monitoring statute. Pure video surveillance of common work areas with posted notice is the routine pattern. Most IA employers issue a single workplace surveillance notice in the handbook. Manufacturing and food-processing employers across Iowa (Tyson, Smithfield, JBS, Cargill, Deere) commonly add badge-tied access control and integrate with USDA-required audits.

Video retention requirements

  • Medical cannabidiol. Iowa Admin. Code 154A sets retention for licensed manufacturers and dispensaries.
  • Healthcare. HIPAA Security Rule (45 CFR Part 164) governs PHI-touching footage.
  • Retail and hospitality. PCI-DSS Requirement 9 specifies 90-day retention for the cardholder data environment.
  • Federal contractors. NDAA Section 889 controls vendor selection.
  • Schools. FERPA reach for K-12 districts and higher education.
  • Food processing and meatpacking. USDA FSIS audits and HACCP records can pull camera evidence into food-safety compliance.

Default retention for IA commercial systems with no specific industry rule is 30 days.

What Tec-Tel does to comply with Iowa regulations

  • Video-only on cameras unless audio is documented with one-party consent under Iowa Code 808B.2.
  • Posted surveillance notice at every public entrance.
  • No cameras in restrooms, locker rooms, dressing rooms, or any space where privacy is reasonably expected.
  • ICDPA consent and notice language coordinated with the customer's privacy team for any biometric capture at covered controllers.
  • Retention configured to the regime that governs the industry (HIPAA, PCI, 154A, NDAA, USDA).
  • NDAA Section 889-compliant vendor selection on federal-touching installs.
  • DPS-licensed work where the install scope or service triggers Iowa Code Chapter 80A.

This is a buyer-facing reference, not legal advice.

Security service in Iowa

Tec-Tel deploys AI-era security across Iowa with one accountable project manager owning design, install, and service to one standard. The cities below have local service detail, deal sizing, and a free consultation. Don't see yours? We cover the whole state.

Or browse the full city directory and nationwide coverage map.