Iowa joins states that require encryption and notification of customers should information be compromised.