The US state of Iowa has recently passed a data breach law that requires companies to give its customers notice should its information be compromised