House Bill: 481
Florida Statute: §817.5681
Effective Date: July 1, 2005
Definition of Personal Information: An individual's first name, first initial and last name, or phone any middle name and last name, in combination with any one or more of the following data elements when the data elements are not encrypted:
(a) Social security number;
(b) Driver's license number or Florida Identification Card number;
(c) Account number, credit card number, or debit card number in combination with any required security code, access code or password that would permit access to an individual's financial account.
Summary: Any person who conducts business in this state and maintains computerized data in a system that includes personal information shall provide notice of any breach of the security of the system, following a determination of the breach, to any resident of this state whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person. The notification shall be made without unreasonable delay, consistent with the legitimate needs of law enforcement, or subject to any measures necessary to determine the presence, nature, and scope of the breach and restore the reasonable integrity of the system. Notification must be made no later than 45 days following the determination of the breach.
Visit the State Web site