Iowa Code 28M.7 – Regional transit district customer data — disclosure restrictions — penalty
Current as of: 2024 | Check for updates
|
Other versions
1. Data concerning applicants, users, and customers of a regional transit district collected by or through personalized internet services or a fare collection system shall be considered private and not subject to disclosure except as provided in this section.
Terms Used In Iowa Code 28M.7
- Aggregate data on user and customer transaction history and fare card use: means data relating to the dates fare cards were used, the times fare cards were used, the types of transit services used, the types of fare products used, and information about the dates, times, and types of fare products purchased. See Iowa Code 28M.1
- Fare collection system: means a system created and administered by a regional transit district that is used for collecting fares or providing fare cards or passes for public transit services including fixed-route bus service, paratransit bus service, rideshare programs, transportation services provided pursuant to section 249A. See Iowa Code 28M.1
- Governmental entity: means the same as defined in section 8A. See Iowa Code 28M.1
- Internet: means the federated international system that is composed of allied electronic communication networks linked by telecommunication channels, that uses standardized protocols, and that facilitates electronic communication services, including but not limited to use of the world wide web; the transmission of electronic mail or messages; the transfer of files and data or other electronic information; and the transmission of voice, image, and video. See Iowa Code 4.1
- Personalized internet services: means services for which regional transit district applicants, users, and customers must establish an internet user account. See Iowa Code 28M.1
- Regional transit district: means a public transit district created by agreement pursuant to chapter 28E by one or more counties and participating cities to provide support for transportation of passengers by one or more public transit systems which may be designated as a public transit system under chapter 324A. See Iowa Code 28M.1
- Subpoena: A command to a witness to appear and give testimony.
2. A regional transit district may disclose aggregate data on user and customer transaction history and fare card use to governmental entities, organizations, school districts, educational institutions, and employers that subsidize or provide fare cards to their clients, students, or employees. Governmental entities, organizations, school districts, educational institutions, and employers may use the aggregate data only for purposes of measuring and promoting fare card use and evaluating the cost-effectiveness of their fare card programs. The disclosure of nonaggregate or personalized data on user and customer transaction history and fare card use to governmental entities, organizations, school districts, educational institutions, and employers shall be strictly prohibited.
3. A regional transit district may disclose data concerning applicants, users, and customers collected by or through personalized internet services or a fare collection system to another governmental entity to prevent a breach of security regarding electronic systems maintained by the regional transit district or the governmental entity, or pursuant to a subpoena issued in connection with a civil or criminal investigation.
4. A violation of this section is punishable by a civil penalty in an amount not to exceed five thousand dollars for each violation.