716AELECTRONIC MAIL716A.1Definitions.As used in this chapter, unless the context otherwise requires:1“Computer” means the same as defined in section 702.1A.2“Computer data” means the same as defined in section 702.1A.3“Computer network” means the same as defined in section 702.1A.4“Computer operation” means arithmetic, logical, monitoring, storage, or retrieval functions, or any combination thereof, and includes, but is not limited to, communication with, storage of data to, or retrieval of data from any device or human hand manipulation of electronic or magnetic impulses. “Computer operation” for a particular computer may also mean any function for which the computer was generally designed.5“Computer program” means an ordered set of data representing coded instructions or statements that, when executed by a computer, causes the computer to perform one or more computer operations.6“Computer services” means computer time or services, including data processing services, internet services, electronic mail services, electronic message services, or information or data stored in connection therewith.7“Computer software” means a set of computer programs, procedures, and associated documentation concerned with computer data or with computer operation, a computer program, or a computer network.8“Electronic mail service provider” means a person who does either of the following:aIs an intermediary in sending or receiving electronic mail.bProvides to end users of electronic mail services the ability to send or receive electronic mail.9“Encryption” means the enciphering of intelligible data into unintelligible form or the deciphering of unintelligible data into intelligible form.10“Owner” means an owner or lessee of a computer or a computer network or an owner, lessee, or licensee of computer data, a computer program, or computer software.11“Person” means the same as defined in section 4.1.12“Property” means all of the following:aReal property.bComputers, computer equipment, computer networks, and computer services.cFinancial instruments, computer data, computer programs, computer software, and all other personal property regardless of whether they are any of the following:1Tangible or intangible.2In a format readable by humans or by a computer.3In transit between computers or within a computer network or between any devices which comprise a computer.4Located on any paper or in any device on which it is stored by a computer or by a person.13“Uses” means, when referring to a computer or computer network, causing or attempting to cause any of the following:aA computer or computer network to perform or to stop performing computer operations.bThe withholding or denial of the use of a computer, computer network, computer program, computer data, or computer software to another user.cA person to put false information into a computer.2005 Acts, ch 123, §1716A.2Transmission of unsolicited bulk electronic mail — criminal penalties.1A person who does any of the following is guilty of an aggravated misdemeanor:aUses a computer or computer network with the intent to falsify or forge electronic mail transmission information or other routing information in any manner in connection with the transmission of unsolicited bulk electronic mail through or into the computer network of an electronic mail service provider or its subscribers.bKnowingly sells, gives, or otherwise distributes or possesses with the intent to sell, give, or otherwise distribute computer software that does any of the following:1Is primarily designed or produced for the purpose of facilitating or enabling the falsification of electronic mail transmission information or other routing information.2Has only limited commercially significant purpose or use other than to facilitate or enable the falsification of electronic mail transmission information or other routing information.3Is marketed by that person acting alone or with another for use in facilitating or enabling the falsification of electronic mail transmission information or other routing information.2A person is guilty of a class “D” felony for committing a violation of subsection 1 when either of the following apply:aThe volume of unsolicited bulk electronic mail transmitted exceeds ten thousand attempted recipients in any twenty-four-hour period, one hundred thousand attempted recipients in any thirty-day time period, or one million attempted recipients in any twelve-month time period.bThe revenue generated from a specific unsolicited bulk electronic mail transmission exceeds one thousand five hundred dollars or the total revenue generated from all unsolicited bulk electronic mail transmitted to any electronic mail service provider by the person exceeds fifty thousand dollars.3A person is guilty of a class “D” felony if the person knowingly hires, employs, uses, or permits a person less than eighteen years of age to assist in the transmission of unsolicited bulk electronic mail in violation of subsection 2.4Transmission of electronic mail from an organization to a member of the organization shall not be a violation of this section.2005 Acts, ch 123, §2; 2019 Acts, ch 140, §24716A.3Sale or offer for direct sale of prescription drugs — criminal penalties.1The retail sale or offer of direct retail sale of a prescription drug, as defined in section 155A.3, through the use of electronic mail or the internet by a person other than a licensed pharmacist, physician, dentist, optometrist, podiatric physician, or veterinarian is prohibited. A person who violates this subsection is guilty of a simple misdemeanor.2aA person who knowingly sells an adulterated or misbranded drug through the use of electronic mail or the internet is guilty of a class “D” felony.b If the death of a person occurs as the result of consuming a drug, as defined in section 155A.3, sold in violation of this subsection, the violation is a class “B” felony.2005 Acts, ch 123, §3; 2013 Acts, ch 90, §197716A.4Use of encryption — criminal penalty.A person who willfully uses encryption to further a violation of this chapter is guilty of an offense which is separate and distinct from the predicate criminal activity and punishable as an aggravated misdemeanor.2005 Acts, ch 123, §4716A.5Venue for criminal violations.For the purpose of venue, a violation of this chapter shall be considered to have been committed in any county in which any of the following apply:1An act was performed in furtherance of any course of conduct which violated this chapter.2The owner has a place of business in the state.3An offender has control or possession of any proceeds of the violation, or of any books, records, documents, property, financial instrument, computer software, computer program, computer data, or other material or objects used in furtherance of the violation.4Access to a computer or computer network was made by wires, electromagnetic waves, microwaves, or any other means of communication.5The offender resides.6A computer which is an object or an instrument of the violation is located at the time of the alleged offense.2005 Acts, ch 123, §5716A.6Civil relief — damages.1A person who is injured by a violation of this chapter may bring a civil action seeking relief from a person whose conduct violated this chapter and recover any damages incurred including loss of profits, attorney fees, and court costs.2A person who is injured by the transmission of unsolicited bulk electronic mail in violation of this chapter may elect, in lieu of actual damages, to recover either of the following:aThe lesser of ten dollars for each unsolicited bulk electronic mail message transmitted in violation of this chapter, or twenty-five thousand dollars per day the messages are transmitted by the violator.bOne dollar for each intended recipient of an unsolicited bulk electronic mail message where the intended recipient is an end user of the electronic mail service provider, or twenty-five thousand dollars for each day an attempt is made to transmit an unsolicited bulk electronic mail message to an end user of the electronic mail service provider.3aA violation of this chapter is a violation of section 714.16, subsection 2, paragraph “a”. All the powers conferred upon the attorney general to accomplish the objectives and carry out the duties prescribed pursuant to section 714.16 are also conferred upon the attorney general to enforce this chapter, including, but not limited to, the power to issue subpoenas, adopt rules which shall have the force of law, and seek injunctive relief and civil penalties.bIn seeking reimbursement pursuant to section 714.16, subsection 7, from a person who has committed a violation of this chapter, the attorney general may seek an order from the court that the person pay to the attorney general on behalf of consumers the amounts for which the person would be liable under subsection 1 or 2, for each consumer who has a cause of action pursuant to this section. Section 714.16, as it relates to consumer reimbursement, shall apply to consumer reimbursement pursuant to this section.4At the request of any party to an action brought pursuant to this section, the court may, in its discretion, conduct all legal proceedings in such a way as to protect the secrecy and security of the computer, computer network, computer data, computer program, and computer software involved in order to prevent possible recurrence of the same or a similar act by another person, and to protect any trade secrets of any party and in such a way as to protect the privacy of nonparties who complain about violations pursuant to this section.5This section shall not be construed to limit a person’s right to pursue any additional civil remedy otherwise allowed by law.6An action brought pursuant to this section shall be commenced before the earlier of five years after the last act in the course of conduct constituting a violation of this chapter or two years after the injured person discovers or reasonably should have discovered the last act in the course of conduct constituting a violation of this chapter.7Personal jurisdiction may be exercised over any person who engages in any conduct in this state governed by this chapter.8The injured person shall not have a cause of action against the electronic mail service provider that merely transmits the unsolicited bulk electronic mail over its computer network.2005 Acts, ch 123, §6716A.7Forfeitures for violations of chapter.All property, including all income or proceeds earned but not yet received from a third party as a result of a violation of this chapter, used in connection with a violation of this chapter, known by the owner thereof to have been used in violation of this chapter, shall be subject to seizure and forfeiture pursuant to chapter 809A.2005 Acts, ch 123, §7