In 2002, the Legislature added what is now Iowa Code § 22.7(43), which provides:
The critical asset protection plan or any part of the plan prepared pursuant to section 29C.8 and any information held by the homeland security and emergency management division that was supplied to the division by a public or private agency or organization and used in the development of the critical asset protection plan to include, but not be limited to, surveys, lists, maps, or photographs. However, the administrator shall make the list of assets available for examination by any person. A person wishing to examine the list of assets shall make a written request to the administrator on a form approved by the administrator. The list of assets may be viewed at the division's offices during normal working hours. The list of assets shall not be copied in any manner. Communications and asset information not required by law, rule, or procedure that are provided to the administrator by persons outside of government and for which the administrator has signed a nondisclosure agreement are exempt from public disclosures. The homeland security and emergency management division may provide all or part of the critical asset plan to federal, state, or local governmental agencies which have emergency planning or response functions if the administrator is satisfied that the need to know and intended use are reasonable. An agency receiving critical asset protection plan information from the division shall not redisseminate the information without prior approval of the administrator.
More recently, the Legislature added § 22.7(5), supra.., dealing with security procedures for the protection of government employees.