ARC 9482C - Iowa Administrative Rules

Adopted and Filed

NIST special publications—dates certain, 29.4(11), 43.9(2)

Untitled document

ARC 9482C

SECRETARY OF STATE[721]

Adopted and Filed

Rulemaking related to dates certain

The Secretary of State hereby amends Chapter 29, “Elections Technology Security,” and Chapter 43, “Notarial Acts,” Iowa Administrative Code.

Legal Authority for Rulemaking

This rulemaking is adopted under the authority provided in Iowa Code sections 9B.14A(8), 17A.5, and 47.1.

State or Federal Law Implemented

This rulemaking implements, in whole or in part, Iowa Code chapters 9B and 47.

Purpose and Summary

This rulemaking amends rules 721—29.4(47) and 721—43.9(9B) to add dates certain for references to National Institute of Standards and Technology (NIST) Special Publications as required by 2024 Iowa Acts, House File 688.

Public Comment and Changes to Rulemaking

Notice of Intended Action for this rulemaking was published in the Iowa Administrative Bulletin on May 28, 2025, as ARC 9288C. No public comments were received. No changes from the Notice have been made.

Adoption of Rulemaking

This rulemaking was adopted by the Secretary of State on July 2, 2025.

Fiscal Impact

This rulemaking has no fiscal impact to the State of Iowa.

Jobs Impact

After analysis and review of this rulemaking, no impact on jobs has been found.

Waivers

Any person who believes that the application of the discretionary provisions of this rulemaking would result in hardship or injustice to that person may petition the Secretary of State for a waiver of the discretionary provisions, if any, pursuant to 721—Chapter 10.

Review by Administrative Rules Review Committee

The Administrative Rules Review Committee, a bipartisan legislative committee which oversees rulemaking by executive branch agencies, may, on its own motion or on written request by any individual or group, review this rulemaking at its regular monthly meeting or at a special meeting. The Committee’s meetings are open to the public, and interested persons may be heard as provided in Iowa Code section 17A.8(6).

Effective Date

This rulemaking will become effective on September 10, 2025.

The following rulemaking action is adopted:

ITEM 1.Amend subrule 29.4(11) as follows:

29.4(11) Any county information technology infrastructure that is used to access or conduct any part of elections in the state is subject to the following requirements:

a.Passwords to access the county network must be compliant with the standards enumerated by either the National Institute of Standards and Technology,June 2017 edition, including the March 2, 2020, updates, of NIST Special Publication 800-63B; the OCIO,; or guidance issued by the state commissioner.

b.Session-lock timeout standards must be compliant with the standards enumerated by either the National Institute of Standards and TechnologyJune 2017 edition, including the March 2, 2020, updates, of NIST Special Publication 800-63B or guidance issued by the state commissioner.

c. and d. No change.

ITEM 2.Amend subrule 43.9(2) as follows:

43.9(2) Identity proofing and credential analysis must be performed by a third-party credential service provider whose methods and standards are substantially similar to those defined in the most recent edition of the National Institute of Standards and Technology’s Digital Identity Guidelines,June 2017 edition, including the March 2, 2020, updates, of NIST Special Publication 800-63-3 and that has provided evidence to the notary public of the ability to satisfy the following requirements:

a. and b. No change.

c.Credential analysis shall, at a minimum, do all of the following:

(1)Use automated software processes to aid the notary public in verifying the identity of a principal or any credible witness.

(2)Ensure that the credential passes an authenticity test, substantially similar to those defined in the most recent edition of the National Institute of Standards and Technology’s Digital Identity GuidelinesJune 2017 edition, including the March 2, 2020, updates, of NIST Special Publication 800-63-3, that:

1. to 4. No change.

(3) No change.

d. No change.

[Filed 7/7/25, effective 9/10/25]

[Published 8/6/25]

EDITOR’S NOTE: For replacement pages for IAC, see IAC Supplement 8/6/25.