Iowa Code Title XIII. Commerce [Chs. 505-554D] § 527.10. Confidentiality

1. A satellite terminal, data processing center, or central routing unit shall not be operated in any manner to permit any person to obtain information concerning the account of any person with a financial institution, unless such information is essential to complete or prevent the completion of a transaction then being engaged in through the use of that facility.

2. A financial institution, data processing center, central routing unit, or other person shall not disseminate any information relating to the use of a multiple use terminal without the written authorization of the retailer on whose premises the terminal is located, or of the owner or operator of the terminal or the financial institution controlling the terminal. This section shall not, however, prohibit or restrict the use of information received in the processing, authorization, or rejection of a requested electronic funds transfer transaction, where such use is necessary or incidental to the processing, authorization, or rejection, or to reconciling disputes or resolving questions raised by a retailer, financial institution, consumer, or any other person regarding the transaction.