Florida Digital Bill of Rights (CS/CS/SB 262 — Technology Transparency)
Florida · Fla. CS/CS/SB 262 (2023); ch. 2023-201, Laws of Fla.; Fla. Stat. Secs. 501.701-501.722
Florida's Digital Bill of Rights gives covered consumers a set of data-privacy rights, including the right to opt out of profiling carried out solely by automated processing when that profiling is used to make decisions that have a legal or similarly significant effect on the person. Businesses that meet the law's thresholds must also conduct and document data-protection assessments for higher-risk processing activities such as profiling, targeted advertising, and the sale of personal data. The Florida Attorney General enforces the law; consumers cannot sue directly. The law applies only to a relatively narrow set of very large businesses.
Technical detail
CS/CS/SB 262 (2023), codified at Fla. Stat. Secs. 501.701-501.722, grants consumers a right to opt out of solely-automated profiling producing legal or similarly significant effects and requires controllers to conduct data-protection assessments for higher-risk processing.
Who is protected: Florida residents acting in an individual/household capacity (consumers) whose personal data is processed by covered controllers.
Who must comply: Large for-profit controllers that meet the statute's high revenue and data-business thresholds (e.g., over $1 billion in global gross annual revenue plus specified data-related criteria).
Key facts
| Jurisdiction | Florida |
|---|---|
| Level | State |
| Status | In effect |
| Protection strength | Limited protection |
| Effective date | 2024-07-01 |
| Enacted | 2023-06-06 |
| Citation | Fla. CS/CS/SB 262 (2023); ch. 2023-201, Laws of Fla.; Fla. Stat. Secs. 501.701-501.722 |
| Enforced by | Florida Attorney General — Department of Legal Affairs |
| Private right of action | No — agency enforcement only |
| Penalties | Violations are treated as unfair and deceptive trade practices under FDUTPA, with civil penalties of up to $50,000 per violation; penalties may be tripled for certain violations, including those involving children's data. A 45-day right to cure may apply. |
| Topics | consumer data privacy · automated decision-making · consumer protection |
| Last verified | 2026-06-16 |
| Official source | The Florida Senate — CS/CS/SB 262 (2023), Technology Transparency / Digital Bill of Rights ↗ |
More AI rules in Florida
- FL Rule 2.515 amendment — AI citation certification (eff. Jun. 15, 2026) · In effect
- FL HB 7027 (2016 driverless AV) · In effect
- FL drone surveillance act · In effect
- FL PDD law (2017) · In effect
- Florida Generated CSAM Law (AI-generated) · In effect
- HB 919 (AI Political Ad Disclaimers) · In effect
Related consumer data privacy rules elsewhere
- Vermont Data Broker Law (H.211) · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for lo · Blocked / in litigation
- House Bill 2512 — Banning surveillance pricing by rideshare · Proposed / pending
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- Maine LD 61 (employer surveillance disclosure & prohibition) · In effect
- Washington SHB 1672 (employee monitoring notice, ADS restrictions, emotion AI ban) · In effect
See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.