Key Facts
Overview
Florida's FDBR has the narrowest applicability among US state privacy laws, effectively targeting only major technology companies through its $1 billion revenue threshold and additional digital business criteria. However, it has the highest base penalty ($50,000) and treble damages ($150,000) for violations involving children.
What This Means for Your Website
- Only applicable to very large tech companies ($1B+ revenue with specific digital business criteria)
- Highest base penalty among US states: $50,000 per violation
- Treble damages ($150,000) for violations involving children
- Consumer rights include opting out of targeted advertising, data sales, and profiling
- Smart speaker and virtual assistant surveillance restrictions apply
Key Requirements
The Florida AG enforces the FDBR with penalties up to $50,000 per violation, tripling to $150,000 for children's data violations. A discretionary 45-day cure period applies except for known violations involving children. The narrow applicability means only a handful of companies are directly subject.
How ConsentStack Handles This
ConsentStack applies Florida's opt-out model for applicable businesses, with enhanced protections for children's data to avoid treble penalty exposure.
Penalties
Up to $50,000 per violation; treble ($150,000) for violations involving children.
Key Requirements
- Consent before selling sensitive data
- Consumer rights: access, correct, delete, portability, opt-out
- Right to opt out of targeted advertising, data sales, and profiling
- Enhanced protections for children's data
- Restrictions on surveillance through smart speakers and virtual assistants
Notable Provisions
- Narrowest applicability — effectively targets only major tech companies
- Highest base penalty ($50,000) among US states
- Treble damages for children ($150,000)
- Smart speaker surveillance restrictions
US State Specifics
Other North America Regulations
Frequently Asked Questions
Which companies does Florida's FDBR target?
Only entities with $1B+ annual global revenue meeting additional criteria: 50%+ ad revenue, operating smart speakers, or operating app stores with 250,000+ apps.
What are the FDBR penalties?
Up to $50,000 per violation — the highest base penalty among US states. Treble damages ($150,000) for violations involving children.
Does the FDBR apply to most businesses?
No. The $1B revenue threshold plus additional criteria make it the narrowest US state privacy law — effectively targeting only major tech companies.
Stay compliant with FDBR
ConsentStack helps you implement Opt-out consent for Florida, United States automatically.