New Florida Information Protection Act Expands Data Breach Notification Requirements

The Florida Information Protection Act of 2014 (FIPA), which became effective July 1, 2014, expanded the requirements on covered entities that acquire, maintain, store or use personal information of Floridians. As part of a growing trend in state legislatures, Florida’s new data breach and security law expands notification requirements on covered entities that experience a breach of security. These new requirements should be reviewed by any entity with a presence in Florida.

After a unanimous passage of Senate Bill 1524, FIPA was signed into law by Florida Governor Rick Scott on June 20, 2014. The new law repealed Florida’s prior data breach notification statue, Fl. Stat. § 817.5681, and replaced it with § 501.171. The new statute made several significant modifications to Florida law that can reach businesses, government and other entities far beyond the state’s borders.