Florida Enacts Digital Bill of Rights, Imposing Strict Data Privacy Rules on Large Corporations
The Florida Digital Bill of Rights (SB 262) became effective on July 1, 2024, establishing new regulations for how large for-profit companies handle consumer data. This law applies to businesses with over $1 billion in global gross annual revenue that also meet at least one additional criterion, such as deriving 50% or more of their revenue from online advertising, operating a consumer smart speaker service, or running an app store with at least 250,000 applications. Under this new legislation, Florida consumers gain rights to confirm, access, correct, delete, and port their personal data. They can also opt out of targeted advertising, data sales, and certain profiling activities. For sensitive data, including health information, biometric data, and precise geolocation data, companies are required to obtain opt-in consent. The law further mandates that covered businesses conduct data protection assessments for activities involving targeted advertising, profiling, data sales, and the processing of sensitive...