Florida has a comprehensive consumer privacy statute, the Florida Digital Bill of Rights (FDBR). This page collects our coverage touching Florida, alongside the federal rules that apply there. For the statute itself rather than the news, see our Florida privacy law page.

State Comprehensive Privacy Laws

Who the Florida Digital Bill of Rights Reaches: The Controller Tests, Section 501.715 and the 2024 Rules

October 5, 2026

Florida's Digital Bill of Rights, enacted by SB 262 in 2023, assigns most of its duties to a controller defined so narrowly that a $1 billion revenue floor and one of three business-model tests must both be met. One section, 501.715, reaches any for-profit business collecting Floridians' data that sells sensitive data, and 2024 rules fill in the enforcement detail.

Read more →
Breach Notification

The Florida Information Protection Act: Section 501.171's Security Duty, Two 30-Day Clocks and an Enforcement Record That Stays Sealed

October 5, 2026

Florida's breach statute is section 501.171, created in 2014 by CS/CS/SB 1524 as the Florida Information Protection Act. It pairs a duty to take reasonable security measures with two 30-day notice clocks, one to residents and one to the Department of Legal Affairs at 500 people, and it treats a violation as a FDUTPA unfair practice with per-breach civil penalties capped at $500,000.

Read more →
Pixel Tracking

Florida's Security of Communications Act and Session Replay: How the 2021 Suits Ended on the Meaning of Contents

October 5, 2026

Florida's Security of Communications Act forbids intercepting electronic communications without every party's consent and gives a civil claim with a $1,000 liquidated damages floor. When session replay suits under it reached Florida's federal courts in 2021, judges dismissed them on the statutory definitions, holding that clicks, keystrokes and page views were not the contents of a communication.

Read more →