šŗšø US-Florida
Informations
Extracts :
Extract :
"āConsumerā means an individual who is a resident of or is domiciled in this state acting only in an individual or household context."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"āConsumerā means an individual who is a resident of or is domiciled in this state acting only in an individual or household context."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
There is no explicit information in SB 262 on this.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"āProcessorā means a person who processes personal data on behalf of a controller."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
There is no information on this based on SB 262 official text.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"Defines a āControllerā as a sole proprietorship, partnership, limited liability company, corporation, association, or legal entity that
meets the following requirements:
⢠Is organized or operated for the profit or financial benefit of its shareholders or owners; Does business in FL or provides
products/services to residents of FL; Collects personal information about consumers, or is the entity on behalf of which such
information is collected.
⢠Satisfies either of the following thresholds:
⢠Controls processing of personal information of 100,000 or more consumers not exempt; OR
⢠Controls or processes personal information of at least 25,000 consumers not exempt and derives 50 percent or more of its
global annual revenues from selling or sharing personal information about consumers."
2023
Reference :
2022 Legislative Session Data Privacy
Information on Florida (and others) on data protection bills | Capital City Consulting
Link to reference Extracts :
Extract :
There is no information in the SB262 official text.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"āSensitive dataā means a category of personal data
which includes any of the following:
(a) Personal data revealing an individualās racial or
ethnic origin, religious beliefs, mental or physical health
diagnosis, sexual orientation, or citizenship or immigration
status.
(b) Genetic or biometric data processed for the purpose of
uniquely identifying an individual.
(c) Personal data collected from a known child.
(d) Precise geolocation data."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"āSensitive dataā means a category of personal data
which includes any of the following:
(a) Personal data revealing an individualās racial or
ethnic origin, religious beliefs, mental or physical health
diagnosis, sexual orientation, or citizenship or immigration
status.
(b) Genetic or biometric data processed for the purpose of
uniquely identifying an individual.
(c) Personal data collected from a known child.
(d) Precise geolocation data."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"āSensitive dataā means a category of personal data
which includes any of the following:
(a) Personal data revealing an individualās racial or
ethnic origin, religious beliefs, mental or physical health
diagnosis, sexual orientation, or citizenship or immigration
status.
(b) Genetic or biometric data processed for the purpose of
uniquely identifying an individual.
(c) Personal data collected from a known child.
(d) Precise geolocation data."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"āSensitive dataā means a category of personal data
which includes any of the following:
(a) Personal data revealing an individualās racial or
ethnic origin, religious beliefs, mental or physical health
diagnosis, sexual orientation, or citizenship or immigration
status.
(b) Genetic or biometric data processed for the purpose of
uniquely identifying an individual.
(c) Personal data collected from a known child.
(d) Precise geolocation data."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"āSensitive dataā means a category of personal data
which includes any of the following:
(a) Personal data revealing an individualās racial or
ethnic origin, religious beliefs, mental or physical health
diagnosis, sexual orientation, or citizenship or immigration
status.
(b) Genetic or biometric data processed for the purpose of
uniquely identifying an individual.
(c) Personal data collected from a known child.
(d) Precise geolocation data."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
Data entered based on reference.
2023
Reference :
Florida Data protection overview |Ā DataGuidance
Information on Florida data protection | DataGuidance
Link to reference Extracts :
Extract :
Data entered based on reference.
2023
Reference :
Florida Data protection overview |Ā DataGuidance
Information on Florida data protection | DataGuidance
Link to reference Extracts :
Extract :
Data entered based on reference.
2023
Reference :
Florida Data protection overview |Ā DataGuidance
Information on Florida data protection | DataGuidance
Link to reference Extracts :
Extract :
Data entered based on reference.
2023
Reference :
Florida Data protection overview |Ā DataGuidance
Information on Florida data protection | DataGuidance
Link to reference Extracts :
Extract :
Data entered based on reference.
2023
Reference :
Florida Data protection overview |Ā DataGuidance
Information on Florida data protection | DataGuidance
Link to reference Extracts :
Extract :
Data entered based on reference.
2023
Reference :
Florida Data protection overview |Ā DataGuidance
Information on Florida data protection | DataGuidance
Link to reference Extracts :
Extract :
Data entered based on reference.
2023
Reference :
Florida Data protection overview |Ā DataGuidance
Information on Florida data protection | DataGuidance
Link to reference Extracts :
Extract :
Data entered based on reference.
2023
Reference :
Florida Data protection overview |Ā DataGuidance
Information on Florida data protection | DataGuidance
Link to reference Extracts :
Extract :
Data entered based on reference.
2023
Reference :
Florida Data protection overview |Ā DataGuidance
Information on Florida data protection | DataGuidance
Link to reference Extracts :
Extract :
Data entered based on reference.
2023
Reference :
Florida Data protection overview |Ā DataGuidance
Information on Florida data protection | DataGuidance
Link to reference Extracts :
Extract :
Data entered based on reference.
2022
Reference :
Florida Data protection overview |Ā DataGuidance
Information on Florida data protection | DataGuidance
Link to reference Extracts :
Extract :
Data entered based on reference.
2023
Reference :
Florida Data protection overview |Ā DataGuidance
Information on Florida data protection | DataGuidance
Link to reference Extracts :
Extract :
"A violation of this part is an unfair and deceptive trade practice actionable under part II of this chapter solely by the Department of Legal Affairs. If the department has reason to believe that a person is in violation of this section, the department may, as the enforcing authority, bring an action against such person for an unfair or deceptive act or practice. For the purpose of bringing an action pursuant to this section, ss. 501.211 and 501.212 do not apply. In addition to other remedies under part II of this chapter, the department may collect a civil penalty of up to $50,000 per violation."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
Extracts :
Extract :
No information on this in either SB 262.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
No information on this in either SB 262.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"The FDBR does not provide a private right of action to consumers for violations of the FDBR. Instead, the FDBR grants the Department of Legal Affairs (i.e., the Office of the Attorney General) exclusive authority to enforce the FDBR. Civil penalties of up to $50,000 per violation may be imposed in the event a covered business fails to remedy the violation within the statutory cure period (see below). The penalties may be trebled if:
A controller willfully disregards a consumer's age when the consumer is a child and the controller is deemed to have actual knowledge of the consumer's age;
A covered entity fails to delete or correct a consumer's personal data after receiving an authenticated consumer request or directions from a controller to delete or correct the consumer's personal data, unless an exception applies; or
A covered entity continues to sell or share a consumer's personal data after the consumer exercises their opt-out right.
The Department of Legal Affairs also has the discretionary authority to collaborate and cooperate with federal and state enforcement authorities concerning consumer data privacy issues and investigations if the state or federal enforcement authorities adhere to confidentiality restrictions "as stringent as" the restrictions of the FDBR."
2023
Reference :
Florida Digital Bill of Rights Signed Into Law
Information on Florida's Digital Bill of Rights | Subject private remedies
Link to reference Extracts :
Extract :
"The FDBR does not provide a private right of action to consumers for violations of the FDBR. Instead, the FDBR grants the Department of Legal Affairs (i.e., the Office of the Attorney General) exclusive authority to enforce the FDBR. Civil penalties of up to $50,000 per violation may be imposed in the event a covered business fails to remedy the violation within the statutory cure period (see below). The penalties may be trebled if:
A controller willfully disregards a consumer's age when the consumer is a child and the controller is deemed to have actual knowledge of the consumer's age;
A covered entity fails to delete or correct a consumer's personal data after receiving an authenticated consumer request or directions from a controller to delete or correct the consumer's personal data, unless an exception applies; or
A covered entity continues to sell or share a consumer's personal data after the consumer exercises their opt-out right.
The Department of Legal Affairs also has the discretionary authority to collaborate and cooperate with federal and state enforcement authorities concerning consumer data privacy issues and investigations if the state or federal enforcement authorities adhere to confidentiality restrictions "as stringent as" the restrictions of the FDBR."
2023
Reference :
Florida Digital Bill of Rights Signed Into Law
Information on Florida's Digital Bill of Rights | Subject private remedies
Link to reference Extracts :
Extract :
"The FDBR does not provide a private right of action to consumers for violations of the FDBR. Instead, the FDBR grants the Department of Legal Affairs (i.e., the Office of the Attorney General) exclusive authority to enforce the FDBR. Civil penalties of up to $50,000 per violation may be imposed in the event a covered business fails to remedy the violation within the statutory cure period (see below). The penalties may be trebled if:
A controller willfully disregards a consumer's age when the consumer is a child and the controller is deemed to have actual knowledge of the consumer's age;
A covered entity fails to delete or correct a consumer's personal data after receiving an authenticated consumer request or directions from a controller to delete or correct the consumer's personal data, unless an exception applies; or
A covered entity continues to sell or share a consumer's personal data after the consumer exercises their opt-out right.
The Department of Legal Affairs also has the discretionary authority to collaborate and cooperate with federal and state enforcement authorities concerning consumer data privacy issues and investigations if the state or federal enforcement authorities adhere to confidentiality restrictions "as stringent as" the restrictions of the FDBR."
2023
Reference :
Florida Digital Bill of Rights Signed Into Law
Information on Florida's Digital Bill of Rights | Subject private remedies
Link to reference Extracts :
Extract :
"In addition, the FDBR requires controllers to establish a conspicuously available appeal process regarding a consumer's request and provide instructions for appealing their decisions."
2023
Reference :
Florida Digital Bill of Rights Signed Into Law
Information on Florida's Digital Bill of Rights | Subject private remedies
Link to reference Extracts :
Extract :
No information on this in either SB 262.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
Extracts :
Extract :
"A controller shall conduct and document a data protection assessment of each of the following processing activities involving personal data: (a) The processing of personal data for purposes of targeted advertising. (b) The sale of personal data. (c) The processing of personal data for purposes of profiling if the profiling presents a reasonably foreseeable risk of: 1. Unfair or deceptive treatment of or unlawful disparate impact on consumers; 2. Financial, physical, or reputational injury to consumers; 3. A physical or other intrusion on the solitude or seclusion, or the private affairs or concerns, of consumers, if the intrusion would be offensive to a reasonable person; or 4. Other substantial injury to consumers."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"A controller in possession of deidentified data shall do all of the following:
(a) Take reasonable measures to ensure that the data cannot be associated with an individual."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"Entity must give notice to each individual in Florida whose PI was, or the Entity reasonably believes to have been, accessed as a result of the breach.
Notice to affected individuals is not required if, after an appropriate investigation and consultation with relevant federal, state, or local law enforcement agencies, the Entity reasonably determines that the breach has not and will not likely result in identity theft or any other financial harm to the individuals whose PI has been accessed. Such a determination must be documented in writing and maintained for at least 5 years. The Entity must provide the written determination to the Department within 30 days after the determination."
2014
Reference :
SECURITY BREACH NOTIFICATION CHART - Florida
Information on data breaches in Florida | PerkinsCoie
Link to reference Extracts :
Extract :
"Entity must provide notice to the Department of Legal Affairs ("Department") of any breach of security affecting 500 or more individuals in Florida."
2014
Reference :
SECURITY BREACH NOTIFICATION CHART - Florida
Information on data breaches in Florida | PerkinsCoie
Link to reference Extracts :
Extract :
"In the event of a breach of security of a system maintained by a third-party agent, such third-party agent shall notify the covered entity of the breach of security as expeditiously as practicable, but no later than 10 days following the determination of the breach of security or reason to believe the breach occurred."
2014
Reference :
The 2022 Florida Statutes
Information on Florida data protection regulations | Data breaches
Link to reference Extracts :
Extract :
"An agent may provide notice as required under subsections (3) and (4) on behalf of the covered entity;"
2014
Reference :
The 2022 Florida Statutes
Information on Florida data protection regulations | Data breaches
Link to reference Extracts :
Extract :
"An agent may provide notice as required under subsections (3) and (4) on behalf of the covered entity;"
2014
Reference :
The 2022 Florida Statutes
Information on Florida data protection regulations | Data breaches
Link to reference Extracts :
Extract :
"For purposes of protecting the confidentiality, integrity, and accessibility of personal data, establish, implement, and maintain reasonable administrative, technical, and physical data security practices appropriate to the volume and nature of the personal data at issue."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"To opt out of the processing of the personal data for purposes of: 1. Targeted advertising; 2. The sale of personal data; or 3. Profiling in furtherance of a decision that produces a legal or similarly significant effect concerning a consumer."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"To obtain a copy of the consumerās personal data in a portable and, to the extent technically feasible, readily usable format if the data is available in a digital format."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
There is no information on this in SB 262 or the Florida Statutes.
Extracts :
Extract :
"To confirm whether a controller is processing the consumerās personal data and to access the personal data."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"A controller or processor that complies with the authenticated parental consent requirements of the Childrenās Online Privacy Protection Act, 15 U.S.C. ss. 6501 et seq., with respect to data collected online, is considered to be in compliance with any requirement to obtain parental consent under this part."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"To confirm whether a controller is processing the consumerās personal data and to access the personal data."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"To correct inaccuracies in the consumerās personal data, taking into account the nature of the personal data and the purposes of the processing of the consumerās personal data."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"To delete any or all personal data provided by or obtained about the consumer."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
There is no information on this in SB 262 or the Florida Statutes.
Extracts :
Extract :
There is no information on this in SB 262 or the Florida Statutes.
Extracts :
Extract :
No mention of this in SB 262.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
No mention of this in SB 262.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
No mention of this in SB 262.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
No mention of this in SB 262.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
No mention of this in SB 262.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
No mention of this in SB 262.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"The EU Adequacy Decision allows the DPF to go into effect immediately, allowing organizations in the EEA to transfer personal data to U.S. companies that self-certify to the DPF. The DPF is based on a system of self-certification where U.S. organizations commit to a set of privacy principles identified by the Department of Commerce ("DoC") . These Principles address certain fundamental data privacy principles such as notice, choice (ability to opt out), accountability for onward transfer, security, data integrity, purpose limitation, access, and recourse.
The new safeguards and redress measures controlling personal data collected by U.S. intelligence agencies also have become effective. The safeguards provide detailed guidelines and procedures governing access to personal data, including subpoena and warrant requirements. In addition, the redress measures available to individuals includes investigation of complaints by U.S. Civil Liberties Protection Officers, with appeals going to a newly created Data Protection Review Court. "
2023
Reference :
US and EU Approve Framework for Personal Data Transfers
Information on EU-US data transfer | White & Case
Link to reference Extracts :
Extract :
"colloquially referred to as Convention 108+, was signed by Austria, Belgium, Bulgaria, Czech Republic, Estonia, Finland, France, Germany, Ireland, Latvia, Lithuania, Luxembourg, Monaco, Netherlands, Norway, Portugal, Spain, Sweden, the U.K., and by Uruguay, one of the six non-European states that have so far joined Convention 108. The other five non-European states are Cape Verde, Mauritius, Mexico, Senegal and Tunisia. Another three countries ā Argentina, Burkina Faso and Morocco ā have also been invited to accede to the treaty."
2018
Reference :
What does the newly signed 'Convention 108+' mean for UK adequacy?
List of countries in the Convention 108
Link to reference Extracts :
Extract :
No mention of this in SB 262.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
Since the APEC applies to the USA Federal, it is assumed that it applied to all states as well.
Reference :
International Data transfer Agreements | DataGuidance
Comparison of international data transfer agreements
Extracts :
Extract :
No mention of this in SB 262.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
No mention of this in SB 262.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
No mention of this in SB 262.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
There is no information on this in the legal text.
Extracts :
Extract :
There is no information on the position of the DPO (in the same context as the GDPR). There is a "Data Controller" ("covered entity") and a "Data Processor" ("third-party agent". These latter two concepts are clearly defined in SB 262 but there is no mention of a DPO position/role.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
There is no information on the position of the DPO (in the same context as the GDPR). There is a "Data Controller" ("covered entity") and a "Data Processor" ("third-party agent". These latter two concepts are clearly defined in SB 262 but there is no mention of a DPO position/role.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
There is no information on the position of the DPO (in the same context as the GDPR). There is a "Data Controller" ("covered entity") and a "Data Processor" ("third-party agent". These latter two concepts are clearly defined in SB 262 but there is no mention of a DPO position/role.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
There is no information on the position of the DPO (in the same context as the GDPR). There is a "Data Controller" ("covered entity") and a "Data Processor" ("third-party agent". These latter two concepts are clearly defined in SB 262 but there is no mention of a DPO position/role.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"A controller shall provide consumers with a reasonably accessible and clear privacy notice, updated at least annually, that includes all of the following information: .... (c) How consumers may exercise their rights under s.501.705(2), including the process by which a consumer may appeal a controllerās decision with regard to the consumerās request."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
Given the controller responsibilities and the possibility of subjects raising complaints/objections etc. and for seeking clarification about the exercise of their rights, it is assumed that they have the controller or their representative's contact details
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
"A controller shall provide consumers with a reasonably accessible and clear privacy notice, updated at least annually,987
that includes all of the following information: (a) The categories of personal data processed by the controller, including, if applicable, any sensitive data processed by the controller.
(b) The purpose of processing personal data."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
Extract :
"Privacy notices.ā
(1) A controller shall provide consumers with a reasonably accessible and clear privacy notice, updated at least annually,987
that includes all of the following information:
(a) The categories of personal data processed by the
controller, including, if applicable, any sensitive data
processed by the controller.
(b) The purpose of processing personal data.
(c) How consumers may exercise their rights under s.
501.705(2), including the process by which a consumer may appeal
a controllerās decision with regard to the consumerās request.
(d) If applicable, the categories of personal data that the
controller shares with third parties.
(e) If applicable, the categories of third parties with
whom the controller shares personal data.
(f) A description of the methods specified in s. 501.709,
by which consumers can submit requests to exercise their
consumer rights under this part.
(2) If a controller engages in the sale of personal data
that is sensitive data, the controller must provide the
following notice: āNOTICE: This website may sell your sensitive
personal data.ā The notice must be posted in accordance with
subsection (1).
(3) If a controller engages in the sale of personal data
that is biometric data, the controller must provide the
following notice: āNOTICE: This website may sell your biometric
personal data.ā The notice must be posted in accordance with
subsection (1).
(4) If a controller sells personal data to third parties or
processes personal data for targeted advertising, the controller
must clearly and conspicuously disclose that process and the manner in which a consumer may exercise the right to opt out of
that process.
(5) A controller may not collect additional categories of
personal information or use personal information collected for
additional purposes without providing the consumer with notice
consistent with this section."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
Extract :
There is no information on this in the legal text.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
Extract :
"Privacy notices.ā
(1) A controller shall provide consumers with a reasonably accessible and clear privacy notice, updated at least annually,987
that includes all of the following information:
(a) The categories of personal data processed by the
controller, including, if applicable, any sensitive data
processed by the controller.
(b) The purpose of processing personal data.
(c) How consumers may exercise their rights under s.
501.705(2), including the process by which a consumer may appeal
a controllerās decision with regard to the consumerās request.
(d) If applicable, the categories of personal data that the
controller shares with third parties.
(e) If applicable, the categories of third parties with
whom the controller shares personal data.
(f) A description of the methods specified in s. 501.709,
by which consumers can submit requests to exercise their
consumer rights under this part.
(2) If a controller engages in the sale of personal data
that is sensitive data, the controller must provide the
following notice: āNOTICE: This website may sell your sensitive
personal data.ā The notice must be posted in accordance with
subsection (1).
(3) If a controller engages in the sale of personal data
that is biometric data, the controller must provide the
following notice: āNOTICE: This website may sell your biometric
personal data.ā The notice must be posted in accordance with
subsection (1).
(4) If a controller sells personal data to third parties or
processes personal data for targeted advertising, the controller
must clearly and conspicuously disclose that process and the manner in which a consumer may exercise the right to opt out of
that process.
(5) A controller may not collect additional categories of
personal information or use personal information collected for
additional purposes without providing the consumer with notice
consistent with this section."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
Extract :
"Privacy notices.ā
(1) A controller shall provide consumers with a reasonably accessible and clear privacy notice, updated at least annually,987
that includes all of the following information:
(a) The categories of personal data processed by the
controller, including, if applicable, any sensitive data
processed by the controller.
(b) The purpose of processing personal data.
(c) How consumers may exercise their rights under s.
501.705(2), including the process by which a consumer may appeal
a controllerās decision with regard to the consumerās request.
(d) If applicable, the categories of personal data that the
controller shares with third parties.
(e) If applicable, the categories of third parties with
whom the controller shares personal data.
(f) A description of the methods specified in s. 501.709,
by which consumers can submit requests to exercise their
consumer rights under this part.
(2) If a controller engages in the sale of personal data
that is sensitive data, the controller must provide the
following notice: āNOTICE: This website may sell your sensitive
personal data.ā The notice must be posted in accordance with
subsection (1).
(3) If a controller engages in the sale of personal data
that is biometric data, the controller must provide the
following notice: āNOTICE: This website may sell your biometric
personal data.ā The notice must be posted in accordance with
subsection (1).
(4) If a controller sells personal data to third parties or
processes personal data for targeted advertising, the controller
must clearly and conspicuously disclose that process and the manner in which a consumer may exercise the right to opt out of
that process.
(5) A controller may not collect additional categories of
personal information or use personal information collected for
additional purposes without providing the consumer with notice
consistent with this section."
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
Extract :
There is no information on this in the legal text.
2023
Reference :
SB 262
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
Extracts :
Extract :
There is no information on this in SB 262 or the Florida Statutes.
Extracts :
Extract :
There is no mention of the size of "business" in the official SB 1864 text.
2022
Reference :
SB 1864
Information on Florida data protection regulations
Link to reference Extracts :
Extract :
There is no information on this in SB 262 or the Florida Statutes.
| Name | Short name | Classification | Jurisdiction | Year of creation |
|---|---|---|---|---|
| Department of Legal Affairs | Department of Legal Affairs | Regulator | Govt authority/ministry |
| Legal text name | Original text name | Legislation type | Year signed | Regulation status | In effect since | Latest update initiated | Latest update areas | Latest update signed year |
|---|---|---|---|---|---|---|---|---|
| Florida Information Privacy Act (FIPA) | SB 1524 | Data breach law | 2014 | Active | 2014 | ||||
| SB 262 | General privacy/data protection law | 2023 | Signed, upcoming | 2024 |