Florida’s Strict New Data Breach Notification Law Takes Effect

The new law sets up one of the most robust data protection regimes in the United States and is relevant to any business that collects personal information nationwide.

Florida Governor Rick Scott signed into law a new data breach notification statute on June 20, Florida Statutes section 501.171, called the Florida Information Protection Act of 2014 (FIPA). FIPA took effect on July 1 and replaced Florida's existing data breach notification statute, Florida Statutes section 817.5681. FIPA significantly expands the definitions of what constitutes personal information and a data breach, introduces a shortened deadline for providing notice to affected Florida residents, and creates unique document disclosure requirements.