{"id":1070,"date":"2021-02-16T13:50:21","date_gmt":"2021-02-16T18:50:21","guid":{"rendered":"https:\/\/www.amp.legal\/blog\/?p=1070"},"modified":"2021-02-17T14:50:01","modified_gmt":"2021-02-17T19:50:01","slug":"florida-data-privacy-hb969","status":"publish","type":"post","link":"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/","title":{"rendered":"Florida HB 969 Privacy Proposal"},"content":{"rendered":"\n<p>The Florida House of Representatives introduced a new consumer data privacy bill with HB 969 that would take effect in 2022. If passed, <a href=\"https:\/\/www.flsenate.gov\/Session\/Bill\/2021\/969\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\"HB 969 (opens in a new tab)\">HB 969<\/a> would amend parts of the Florida Information Protection Act (FIPA) under 501.171 and create a new data privacy section under 501.173.<\/p>\n\n\n\n<h3>Privacy policy requirement<\/h3>\n\n\n\n<p><a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/legiscan.com\/FL\/text\/H0969\/id\/2293170\/Florida-2021-H0969-Introduced.pdf\" target=\"_blank\">HB 969<\/a> requires \u201ca business that collects personal information about consumers\u201d to maintain an online privacy policy. The definition of business in the bill targets large companies and <a href=\"https:\/\/www.amp.legal\/blog\/data-brokers-individual-opt-out\/\">data brokers<\/a>. The privacy policy must be available on a business website, and the business must update the information every 12 months. The policy must include the following information:<\/p>\n\n\n\n<ul><li><strong>Privacy rights<\/strong> \u2013 Any Florida-specific consumer privacy rights. <\/li><li><strong>Categories of personal information collected<\/strong> \u2013 A list of the categories of personal information the business collects or has collected about consumers.<\/li><li><strong>Categories of personal information sold or shared<\/strong> \u2013 A list that identifies which categories of personal information the business sells or shares or has sold or shared about consumers. If the business does not sell or share personal information, the business shall disclose that fact. <\/li><li><strong>Categories of personal information disclosed<\/strong> \u2013 A list that identifies which categories of personal information the business discloses, shares, or does not disclosure or share about consumers for a business purpose.<\/li><li><strong>Right to opt-out<\/strong> \u2013 The right to opt-out of the selling or sharing to third parties and the ability to request deletion or correction of certain personal information. This would also require a business to disclose the use of information to consumers and follow a data retention schedule.<\/li><\/ul>\n\n\n\n<h3>Right to request collected data<\/h3>\n\n\n\n<p>If enacted, HB 969 gives consumers the right to request a copy of personal data that a business collects. The Florida bill would require a business to disclose:<\/p>\n\n\n\n<ul><li>The specific personal information collected about the consumer.<\/li><li>The categories and sources of the collected information.<\/li><li>The business or commercial purpose for collecting or selling information.<\/li><li>The categories of third parties that shares the consumer\u2019s personal information.<\/li><\/ul>\n\n\n\n<p>HB 969 forbids discrimination\nagainst consumers for exercising their rights. This includes actions towards\nconsumers such as denying to provide goods or services, providing a different\nquality, and charging different rates.<\/p>\n\n\n\n<h3>Private cause of action<\/h3>\n\n\n\n<p>Unlike <a href=\"https:\/\/www.amp.legal\/blog\/florida-data-privacy-law-in-retreat\/\">previous bills<\/a>, HB 969 includes a private cause of action against a business. The bill allows consumers to bring a civil action if their &#8220;nonencrypted and nonredacted personal information or e-mail address\u201d (when combined with an account password or security question and answer) is subject to an unauthorized access and exfiltration, theft, or disclosure. Remedies for consumers include:<\/p>\n\n\n\n<ul><li>Damages in an amount not less than $100 and not greater than $750 per consumer per incident or actual damages, whichever is greater.<\/li><li>Injunctive or declaratory relief, as the court deems proper.<\/li><\/ul>\n\n\n\n<p>The remedies created in the bill give consumers a recourse when a business violates the duty to implement and maintain reasonable security procedures and practices that are appropriate to the nature of the information.<\/p>\n\n\n\n<h3>State enforcement<\/h3>\n\n\n\n<p>If passed, HB 969 would allow the Department of Legal Affairs (DLA)\nto bring an action against a violator that includes a business, service\nprovider, or other person or entity. Once notified of noncompliance, a business\nmust cure any alleged violation within 30 days. <\/p>\n\n\n\n<p>The bill would allow the DLA to seek civil penalties of not more than $2,500 for each unintentional violation or $7,500 for each intentional violation. These fines could be tripled if the violation involves a consumer who is 16 years of age or younger. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Florida House of Representatives introduced a new consumer data privacy bill with HB 969 that would take effect in 2022. If passed, HB 969 would amend parts of the Florida Information Protection Act (FIPA) [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1071,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[78],"tags":[126,79,116,125],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Florida HB 969 Privacy Proposal - Cyber Law Blog<\/title>\n<meta name=\"description\" content=\"Florida&#039;s HB 969 consumer data privacy bill would require a business to post a privacy policy and allow consumers to opt-out and sue violators.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Florida HB 969 Privacy Proposal - Cyber Law Blog\" \/>\n<meta property=\"og:description\" content=\"Florida&#039;s HB 969 consumer data privacy bill would require a business to post a privacy policy and allow consumers to opt-out and sue violators.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/\" \/>\n<meta property=\"og:site_name\" content=\"Cyber Law Blog\" \/>\n<meta property=\"article:published_time\" content=\"2021-02-16T18:50:21+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-02-17T19:50:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.amp.legal\/blog\/wp-content\/uploads\/2021\/02\/Florida-Landscape.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"900\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Alice M. Porch, Esq., CIPP\/US, C|EH, Security+\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alice M. Porch, Esq., CIPP\/US, C|EH, Security+\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/\"},\"author\":{\"name\":\"Alice M. Porch, Esq., CIPP\/US, C|EH, Security+\",\"@id\":\"https:\/\/www.amp.legal\/blog\/#\/schema\/person\/2abed582dc9fbf067a8aa30d3e21453f\"},\"headline\":\"Florida HB 969 Privacy Proposal\",\"datePublished\":\"2021-02-16T18:50:21+00:00\",\"dateModified\":\"2021-02-17T19:50:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/\"},\"wordCount\":563,\"publisher\":{\"@id\":\"https:\/\/www.amp.legal\/blog\/#organization\"},\"keywords\":[\"consumer privacy\",\"data privacy\",\"data security\",\"Florida data privacy law\"],\"articleSection\":[\"Data Privacy\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/\",\"url\":\"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/\",\"name\":\"Florida HB 969 Privacy Proposal - Cyber Law Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.amp.legal\/blog\/#website\"},\"datePublished\":\"2021-02-16T18:50:21+00:00\",\"dateModified\":\"2021-02-17T19:50:01+00:00\",\"description\":\"Florida's HB 969 consumer data privacy bill would require a business to post a privacy policy and allow consumers to opt-out and sue violators.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.amp.legal\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Florida HB 969 Privacy Proposal\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.amp.legal\/blog\/#website\",\"url\":\"https:\/\/www.amp.legal\/blog\/\",\"name\":\"Cyber Law Blog\",\"description\":\"Exploring technology law in cyberspace\",\"publisher\":{\"@id\":\"https:\/\/www.amp.legal\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.amp.legal\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.amp.legal\/blog\/#organization\",\"name\":\"Alice M. Porch, P.A.\",\"url\":\"https:\/\/www.amp.legal\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.amp.legal\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.amp.legal\/blog\/wp-content\/uploads\/2017\/08\/AMP-Logo.png\",\"contentUrl\":\"https:\/\/www.amp.legal\/blog\/wp-content\/uploads\/2017\/08\/AMP-Logo.png\",\"width\":1104,\"height\":1114,\"caption\":\"Alice M. Porch, P.A.\"},\"image\":{\"@id\":\"https:\/\/www.amp.legal\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.amp.legal\/blog\/#\/schema\/person\/2abed582dc9fbf067a8aa30d3e21453f\",\"name\":\"Alice M. Porch, Esq., CIPP\/US, C|EH, Security+\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.amp.legal\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b0913e4ef042f9c502b709824db43e8f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b0913e4ef042f9c502b709824db43e8f?s=96&d=mm&r=g\",\"caption\":\"Alice M. Porch, Esq., CIPP\/US, C|EH, Security+\"},\"description\":\"Alice is a member of the Florida Bar, and she focuses on data privacy and cybersecurity compliance. She attended the Warrington College of Business at the University of Florida and earned a Bachelor of Science in Business Administration. After graduating, she earned a Juris Doctor at the Stetson University College of Law. During law school, she served as an Assistant Executive Editor for Stetson Law Review and also as a Staff Editor for Stetson Journal of Advocacy and the Law. She also served as a member of The Florida Bar Journal\/News Editorial Board from 2018-2024. She is currently a member of the Florida Bar Cybersecurity and Privacy Law Substantive Law Committee.\",\"sameAs\":[\"https:\/\/www.aliceporch.com\",\"https:\/\/www.linkedin.com\/in\/alice-m-porch\/\"],\"url\":\"https:\/\/www.amp.legal\/blog\/author\/amplegal\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Florida HB 969 Privacy Proposal - Cyber Law Blog","description":"Florida's HB 969 consumer data privacy bill would require a business to post a privacy policy and allow consumers to opt-out and sue violators.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/","og_locale":"en_US","og_type":"article","og_title":"Florida HB 969 Privacy Proposal - Cyber Law Blog","og_description":"Florida's HB 969 consumer data privacy bill would require a business to post a privacy policy and allow consumers to opt-out and sue violators.","og_url":"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/","og_site_name":"Cyber Law Blog","article_published_time":"2021-02-16T18:50:21+00:00","article_modified_time":"2021-02-17T19:50:01+00:00","og_image":[{"width":900,"height":525,"url":"https:\/\/www.amp.legal\/blog\/wp-content\/uploads\/2021\/02\/Florida-Landscape.jpg","type":"image\/jpeg"}],"author":"Alice M. Porch, Esq., CIPP\/US, C|EH, Security+","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Alice M. Porch, Esq., CIPP\/US, C|EH, Security+","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/#article","isPartOf":{"@id":"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/"},"author":{"name":"Alice M. Porch, Esq., CIPP\/US, C|EH, Security+","@id":"https:\/\/www.amp.legal\/blog\/#\/schema\/person\/2abed582dc9fbf067a8aa30d3e21453f"},"headline":"Florida HB 969 Privacy Proposal","datePublished":"2021-02-16T18:50:21+00:00","dateModified":"2021-02-17T19:50:01+00:00","mainEntityOfPage":{"@id":"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/"},"wordCount":563,"publisher":{"@id":"https:\/\/www.amp.legal\/blog\/#organization"},"keywords":["consumer privacy","data privacy","data security","Florida data privacy law"],"articleSection":["Data Privacy"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/","url":"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/","name":"Florida HB 969 Privacy Proposal - Cyber Law Blog","isPartOf":{"@id":"https:\/\/www.amp.legal\/blog\/#website"},"datePublished":"2021-02-16T18:50:21+00:00","dateModified":"2021-02-17T19:50:01+00:00","description":"Florida's HB 969 consumer data privacy bill would require a business to post a privacy policy and allow consumers to opt-out and sue violators.","breadcrumb":{"@id":"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.amp.legal\/blog\/florida-data-privacy-hb969\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.amp.legal\/blog\/"},{"@type":"ListItem","position":2,"name":"Florida HB 969 Privacy Proposal"}]},{"@type":"WebSite","@id":"https:\/\/www.amp.legal\/blog\/#website","url":"https:\/\/www.amp.legal\/blog\/","name":"Cyber Law Blog","description":"Exploring technology law in cyberspace","publisher":{"@id":"https:\/\/www.amp.legal\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.amp.legal\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.amp.legal\/blog\/#organization","name":"Alice M. Porch, P.A.","url":"https:\/\/www.amp.legal\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.amp.legal\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.amp.legal\/blog\/wp-content\/uploads\/2017\/08\/AMP-Logo.png","contentUrl":"https:\/\/www.amp.legal\/blog\/wp-content\/uploads\/2017\/08\/AMP-Logo.png","width":1104,"height":1114,"caption":"Alice M. Porch, P.A."},"image":{"@id":"https:\/\/www.amp.legal\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.amp.legal\/blog\/#\/schema\/person\/2abed582dc9fbf067a8aa30d3e21453f","name":"Alice M. Porch, Esq., CIPP\/US, C|EH, Security+","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.amp.legal\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/b0913e4ef042f9c502b709824db43e8f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b0913e4ef042f9c502b709824db43e8f?s=96&d=mm&r=g","caption":"Alice M. Porch, Esq., CIPP\/US, C|EH, Security+"},"description":"Alice is a member of the Florida Bar, and she focuses on data privacy and cybersecurity compliance. She attended the Warrington College of Business at the University of Florida and earned a Bachelor of Science in Business Administration. After graduating, she earned a Juris Doctor at the Stetson University College of Law. During law school, she served as an Assistant Executive Editor for Stetson Law Review and also as a Staff Editor for Stetson Journal of Advocacy and the Law. She also served as a member of The Florida Bar Journal\/News Editorial Board from 2018-2024. She is currently a member of the Florida Bar Cybersecurity and Privacy Law Substantive Law Committee.","sameAs":["https:\/\/www.aliceporch.com","https:\/\/www.linkedin.com\/in\/alice-m-porch\/"],"url":"https:\/\/www.amp.legal\/blog\/author\/amplegal\/"}]}},"_links":{"self":[{"href":"https:\/\/www.amp.legal\/blog\/wp-json\/wp\/v2\/posts\/1070"}],"collection":[{"href":"https:\/\/www.amp.legal\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.amp.legal\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.amp.legal\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.amp.legal\/blog\/wp-json\/wp\/v2\/comments?post=1070"}],"version-history":[{"count":16,"href":"https:\/\/www.amp.legal\/blog\/wp-json\/wp\/v2\/posts\/1070\/revisions"}],"predecessor-version":[{"id":1091,"href":"https:\/\/www.amp.legal\/blog\/wp-json\/wp\/v2\/posts\/1070\/revisions\/1091"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.amp.legal\/blog\/wp-json\/wp\/v2\/media\/1071"}],"wp:attachment":[{"href":"https:\/\/www.amp.legal\/blog\/wp-json\/wp\/v2\/media?parent=1070"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.amp.legal\/blog\/wp-json\/wp\/v2\/categories?post=1070"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.amp.legal\/blog\/wp-json\/wp\/v2\/tags?post=1070"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}