Florida
From US state consumer privacy laws: Which US states have comprehensive consumer privacy laws, who do they apply to, and what happens if a business breaks them?
Law: Florida Digital Bill of Rights
The act's official or short title as the statute or the state's official page gives it, with its code citation if stated.
This part may be cited as the “Florida Digital Bill of Rights.”
Source: http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/Sections/0501.701.html. Read 2026-11-01. Read once.
Takes effect: Not looked at yet
The first date the law's main consumer-privacy duties apply to businesses, as stated by the statute or state. Ignore later phase-ins for specific provisions.
No source we could use stated this. A blank never means no.
Who it applies to: Makes in excess of $1 billion in global gross annual revenues
The law's applicability threshold in short form, as the statute states it, such as revenue or number of consumers processed.
Makes in excess of $1 billion in global gross annual revenues
Source: http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/Sections/0501.702.html. Read 2026-11-01. Read once.
Consumers threshold: Not looked at yet
The lowest number of state consumers whose personal data triggers the law on its own, without a revenue test. Null if the law has no such number.
No source we could use stated this. A blank never means no.
Cure period: 45 days
Days the statute gives a business to fix a violation before enforcement. Null if the law gives no right to cure.
the department may grant a 45-day period to cure the alleged violation
Source: http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/Sections/0501.72.html. Read 2026-11-01. Read once.
Cure period ends: Not looked at yet
The date the right to cure sunsets, as stated in the statute. Null if there is no cure period or it does not expire.
No source we could use stated this. A blank never means no.
Enforced by: Department of Legal Affairs
The official or agency the statute names as enforcer.
solely by the Department of Legal Affairs
Source: http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/Sections/0501.72.html. Read 2026-11-01. Read once.
Maximum penalty: 50000 USD per violation
The highest civil penalty per violation stated in the statute, including higher tiers such as intentional violations. Use the statute's base figure, not inflation-adjusted amounts, unless the statute itself states the adjusted figure.
a civil penalty of up to $50,000 per violation
Source: http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/Sections/0501.72.html. Read 2026-11-01. Read once.
Private right of action: No
True if consumers can sue directly under the law for any violation. False if the statute says it creates no private right of action or leaves enforcement solely to the state.
This part does not establish a private cause of action.
Source: http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/Sections/0501.72.html. Read 2026-11-01. Read once.
Opt-out signal required: Not looked at yet
True if the statute requires businesses to honor a universal opt-out signal or preference signal, such as Global Privacy Control, now or by a stated date.
No source we could use stated this. A blank never means no.