Public Records/Investigations by the Department of Legal Affairs; Providing an exemption from public records requirements for information held by the Department of Legal Affairs relating to notifications or investigations of certain companion chatbot violations; providing an exemption from public records requirements for information held by the department relating to notifications or investigations of certain bot-related consumer protection violations; requiring that certain information remain confidential and exempt upon the completion or cessation of an investigation; providing for future legislative review and repeal of the exemption; providing a statement of public necessity, etc.
OGSR/Cybersecurity, Information Technology, and Operational Technology Information; Providing an exemption from public records requirements for the cybersecurity, information technology, and operational technology information held by an agency; providing an exemption from public meetings requirements for any portion of a meeting that would reveal such information; providing for future legislative review and repeal of the exemptions; providing a statement of public necessity, etc.
Pricing Based on Collection of Consumer Information; Citing this act as the “Florida Consumer Privacy Act”; declaring unlawful any act or practice of surveillance pricing; requiring certain individuals who advertise, promote, label, or publish a statement, display, image, offer, or announcement of surveillance pricing to include a specified clear and conspicuous disclosure with such statement, display, image, offer, or announcement; providing penalties, etc.
Application Stores; Requiring an app store provider to take certain steps to verify the ages of individuals who create or who have existing accounts with the app store provider; providing parental consent requirements for accounts created or held by minors; requiring app store providers to take certain steps to protect specified personal information; authorizing minors, or the parents of minors, to bring civil actions against app store providers or developers for violations of the act, etc.
Pricing Based on Collection of Consumer Information; Declares unlawful any act or practice of surveillance pricing; provides exceptions; requires certain individuals who advertise, promote, label, or publish statement, display, image, offer, or announcement of surveillance pricing to include specified clear & conspicuous disclosure with such statement, display, image, offer, or announcement; provides for penalties; prohibits consumers from waiving certain rights; declaring any such waiver void.
Disclosure of Public Servants' Personal Information; Authorizes certain public employees & officials to provide written notice to data broker to prevent disclosure of specified personal data concerning themselves & related persons; prohibits data broker from disclosing or redisclosing certain data after receipt of such notice; authorizes data brokers to provide e-mail addresses for receipt of such notice under specified conditions; provides for civil actions against data broker for failure to comply; provides standard of fault in such actions; provides that it is not defense that protected information was available through specified means; provides that it is affirmative defense to assert that person is not covered person; provides exceptions; provides for damages & costs.
Disclosure of Public Servants’ Personal Information; Authorizing certain public employees and officials to provide a written notice to a data broker to prevent disclosure of specified personal data concerning themselves and related persons; prohibiting a data broker from disclosing or redisclosing certain data after receipt of such notice; authorizing data brokers to provide e-mail addresses for receipt of such notice under specified conditions; providing for civil actions against a data broker for failure to comply, etc.
Motor Vehicle Data Privacy and Autonomy; Prohibits manufacturer from certain actions relating to operator data; provides exceptions; prohibits manufacturer from certain actions relating to personal identifying information; requires manufacturer to provide motor vehicle owner with access to & control of operator data; requires manufacturer to create certain interface; provides reporting requirements; requires DHSMV, in consultation with specified entities, to establish at least one standard for interface by specified date; requires DHSMV to review & revise standard or standards by specified date & at specified intervals; provides that violation of certain provisions is unfair & deceptive trade practice; requires DHSMV to adopt rules.
Motor Vehicle Operator Privacy; Citing this act as the "Driver Privacy Act"; prohibiting certain personal information and e-mail addresses from being sold to or shared with a third-party company, foreign country of concern, or foreign principal; providing for retroactive application; providing penalties for a third-party company that uses or releases certain information for a specified purpose, etc.
Office of Financial Regulation; Requires loan originators, mortgage brokers, & mortgage lenders & money services businesses to develop, implement, & maintain comprehensive written information security programs for protection of information systems & nonpublic personal information & to establish written incident response plans; provides requirements for notices of security breaches; revises list of actions by money services businesses which constitute grounds for disciplinary actions & penalties; provides requirements for emergency orders that suspend money services business licenses; provides that debit card transaction shall be treated same as cash transactions & prohibits redemption through credit card transaction; requires financial institutions to take measures to protect & secure certain data that contain personal information; provides requirements for notices of security breaches to office, DLA, certain individuals, & certain credit reporting agencies; revises timeline for mailing of payment for salary & travel expenses of certain field staff; revises requirements for permission to organize credit unions; removes provisions that impose limitations on investments in real estate & equipment for credit unions; revises requirements & factors for approving applications for organizing banks & trust companies; revises requirements for directors of certain banks & trust companies.
