{"data":{"id":"us-ia/iowa-code-507f.13","jurisdiction":"us-ia","citation":"Iowa Code § 507F.13","heading":"Applicability.","body":"1. This chapter shall not apply to a licensee that is subject to, and in compliance with, the Health Insurance Portability and Accountability Act. The licensee shall annually submit to the commissioner a written certification of the licensee’s compliance with HIPAA.\n2. This chapter shall not apply to a licensee that is owned or controlled by a federally insured depository institution that is subject to, and in compliance with, the Gramm-Leach-Bliley Act or comparable federal law and corresponding regulations.\n3. A licensee shall have one hundred eighty days from the date the licensee no longer qualifies for exemption under subsection 1 or 2 to comply with this chapter.","path":["Title XIII - COMMERCE (Ch. 505 - 554I)","Chapter 507F - INSURANCE DATA SECURITY"],"source_url":"https://www.legis.iowa.gov/docs/code/2026/507F.13.pdf","current_through":"Iowa Code 2026 edition","vintage":"","retrieved_at":"2026-09-14T19:40:13Z","sha256":"8bbda2019c521bd11c7679aa0399b28007bf1a661becfe3622ad40783c805f16","source_id":"us-ia","stale":false,"prev":"us-ia/iowa-code-507f.12","next":"us-ia/iowa-code-507f.14"},"notice":"GroundRules: Original legal text. Not legal advice."}