United States · compare states
Arkansas and Iowa: health record laws compared
Arkansas and Iowa, side by side on the seven questions, with the laws read October 3, 2026. They give different answers on health data outside HIPAA, getting a copy, right to sue, breach notice and AI in care, and the same answer on everything else.
The seven questions, side by side
"Differs" marks a question where the answers are not the same; "same" marks one where they are. "Can't compare" means at least one answer was not checked; a not-checked answer is not a no. Where a question has a map, the small square shows the color each column has on it. Each citation opens that state's page, with the law quoted, dated and linked. There is no total and no rank: the questions are on different scales, and some have no best answer.
| Question | Arkansas | Iowa |
|---|---|---|
| Health data outside HIPAADo apps and wearables need your OK before sharing health data?differs | No law foundWe searched the official code and found none.How we searched | Opt-out onlyOpt-out only. A privacy law treats health data as sensitive, but you have to tell a business to stop.Iowa Code §715D.4(2); Iowa Code §715D.2(1) |
| Getting a copyDo you get a copy faster or free in some cases?differs | NeitherNo. A law is in force, but it adds nothing to HIPAA's terms.Ark. Code § 16-46-106(c)(3), as amended by Act 765 of 2023; Ark. Code § 16-46-106(c)(4)(A), as amended by Act 765 of 2023 | Free copy in some casesIn one way: a free copy in at least one case.Iowa Code §622.10(6); Iowa Code §622.10(6)(b) |
| Health information exchangeCan you say no to sharing through a health information exchange (a network that passes records between doctors)?same | Opt-outOpt-out. Your records go through the exchange unless you say no, and there is a published way to say no.25 CAR § 20-105(b); 25 CAR § 20-107(b)(5) | Opt-outOpt-out. Your records go through the exchange unless you say no, and there is a published way to say no.Iowa Code §135D.7(1)(c)(2); Iowa Code §135D.7(7) |
| Are some sensitive records, like mental health or HIV, given extra rules? These answers record whether a rule exists and what it says. They say nothing about whether any care is legal or available. | ||
| Reproductive health recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Ark. Code § 20-16-2504(b)(1) (enacted as § 20-16-2404 by Act 560 of 2021) | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Iowa Code §144.29A(3) |
| Mental health recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.20 CAR § 416-311(b) | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Iowa Code §228.2(1) |
| HIV recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.17 CAR § 140-1006(a) | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Iowa Code §141A.9(1) |
| Genetic recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Ark. Code § 16-43-1101 (Act 1222 of 2001) | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Iowa Code §729.6(3)(b) |
| Right to sueCan you sue if your records are misused?differs | No right to sueNo. Only the attorney general or a regulator can enforce these laws.Ark. Code § 4-110-108 (Act 1526 of 2005) | Narrow case onlyOnly in a narrow case, such as a data breach or one kind of record. The laws below say which.Iowa Code §141A.11(1); Iowa Code §729.6(8) |
| Breach noticeMust you be told if health data leaks in a breach?differs | One of the twoPartly. The breach notice law covers one of the two: medical information or health insurance information.Ark. Code § 4-110-103(5) (Act 1526 of 2005); Ark. Code § 4-110-103(7)(D) (Act 1526 of 2005; subdivision (7) last amended by Act 1030 of 2019) | NeitherNo. The breach notice law covers neither medical nor health insurance information.Iowa Code §715C.1(11); Iowa Code §715C.2(1), (7)(d), (8) |
| AI in careAre there rules for AI used in your care?differs | No law foundWe searched the official code and found none.How we searched | 1 of 3 rulesOne of the three rules is in force. A licensed clinician decides, not AI alone.Another law is signed and takes effect July 1, 2027.2026 Iowa Acts ch 1087 (HF 2635), §2, adding Iowa Code §514F.8(2A); 2026 Iowa Acts ch 1068 (SF 2417), §5, Iowa Code §554J.5 |
Not legal advice. This records what each law said on the date we read it. Laws and court orders change. State laws add to the federal floor. The United States score in the world index rates only federal law and national systems, so these state profiles do not change it.
Compare other states
All 50 states and Washington, DC, question by question
Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI
Health Record Rights Index by SuperTruth. Research tool, not legal advice. Our own words are CC BY 4.0; quoted law and source titles stay with their owners.