State Guide
Florida Privacy & Data Security Laws
Every statute below can apply to a business handling Florida residents' data, depending on your revenue, the number of Florida consumers you process, and what kind of data you collect. This is a general reference, not a determination for your specific business — run the full questionnaire to see which of these actually apply to you.
Comprehensive Privacy Law · 1
Unusual, narrow-but-severe model: no consumer-count threshold at all. Applies only to for-profit controllers with more than $1 BILLION in global gross revenue that also either derive 50%+ of revenue from online ad sales (including targeted advertising), operate a smart-speaker/voice-assistant service, or run an app store with 250,000+ apps. In practice this only reaches a small number of the largest tech companies. Nonprofits are fully exempt.
Data Security & Breach Notification · 1
Requires reasonable measures to protect and secure personal information in electronic form. Applies regardless of company size whenever you hold covered personal information about a resident of this state.
Genetic Privacy · 1
Regulates direct-to-consumer genetic testing companies and/or genetic data generally — typically requiring express consent before collecting, using, or disclosing genetic data, and consent (or destruction) requirements for biological samples. Enforced through criminal penalties, not a civil private right of action.