Florida Information Protection Act

Florida SB 1524 of 2014 requires that a corporation, trust, estate, cooperative, association, or other commercial entity that acquires, maintains, stores, or uses personal information shall provide notice to the department of any breach of security affecting 500 of more individuals in this state. Such notice must be provided to the department as expeditiously as practicable, but no later than 30 days after the determination of the breach or reason to believe a breach occurred. The policy detects combinations of Personally Identifiable Information (PII) like social security, credit card, and driver’s license numbers. Additional rules protect passwords. The rules for this policy are:

• Florida Information Protection Act: SSN with CCN
• Florida Information Protection Act: CCN with FL Driver License
• Florida Information Protection Act: Password Dissemination for non-HTTP/S Traffic (Wide)
• Florida Information Protection Act: Password Dissemination for non-HTTP/S Traffic (Default)
• Florida Information Protection Act: Password Dissemination for non-HTTP/S Traffic (Narrow)