A bill in Florida would create new obligations for covered businesses and greatly expand consumers’ rights concerning their personal information, such as a right to notice about a business’s data collection and selling practices. House Bill 969 also would establish a private cause of action for consumers affected by a data breach involving certain personal information when reasonable safeguards were not in place to protect that information. The bill would amend the state’s Florida Information Protection Act of 2014 (FIPA), to expand the definition of “personal information” to include biometric information. In the event of a data breach involving many consumers, $100 to $750 per violation could add up and entail serious and substantial exposure.
