# Iowa Code § 507F.5: Third-party service provider arrangements

> Iowa · Statutes · In force

URL: https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.5

## Section

- **Citation:** Iowa Code § 507F.5
- **Heading:** Third-party service provider arrangements
- **Jurisdiction:** Iowa
- **Kind:** Statutes
- **Status:** In force
- **Text as of:** August 14, 2026
- **Source:** Compiled text
- **Location:** IA Code / Title XIII / Chapter 507F / Section 507F.5

## Text

(1) A licensee shall exercise due diligence in the selection of third-party service providers, conduct oversight of all third-party service provider arrangements, and require all third-party service providers to implement appropriate administrative, technical, and physical measures to protect and secure the information systems and nonpublic information that are accessible to, or held by, the licensee’s third-party service providers.

(2) Licensees shall comply with this section no later than January 1, 2024.

2021 Acts, ch 79, §5, 17

## Nearby sections

- [Iowa Code § 507F.1 Title.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.1.md)
- [Iowa Code § 507F.2 Purpose and scope.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.2.md)
- [Iowa Code § 507F.3 Definitions.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.3.md)
- [Iowa Code § 507F.4 Information security program.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.4.md)
- [Iowa Code § 507F.5 Third-party service provider arrangements.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.5.md)
- [Iowa Code § 507F.6 Cybersecurity event investigation.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.6.md)
- [Iowa Code § 507F.7 Cybersecurity event notification and report to the commissioner.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.7.md)
- [Iowa Code § 507F.8 Cybersecurity event notification to consumers.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.8.md)
- [Iowa Code § 507F.9 Cybersecurity event third-party service providers.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.9.md)
- [Iowa Code § 507F.10 Cybersecurity event reinsurers.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.10.md)
- [Iowa Code § 507F.11 Cybersecurity event producers of record.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.11.md)
- [Iowa Code § 507F.12 Confidentiality.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.12.md)
- [Iowa Code § 507F.13 Applicability.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.13.md)
- [Iowa Code § 507F.14 Penalties.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.14.md)

---

Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.5. Check the current official text before relying on it. Not legal advice.