Florida Digital Bill of Rights, general applicability and large-platform threshold

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 1 July 2024.

A comprehensive regime rule binding private bodies.

As of 27 August 2026.

What it requires

Confirm whether you are a controller under Florida's narrow test before relying on FDBR: it binds only a for-profit entity conducting business in Florida that collects personal data, determines the purposes and means of processing, makes more than $1 billion in global gross annual revenue, and either derives 50 percent or more of that revenue from online advertising, operates a qualifying smart speaker service, or operates an app store or digital distribution platform offering at least 250,000 applications.
Do not treat FDBR as Florida's general consumer-privacy law. Outside the $1 billion-plus platform set it defines, Florida imposes no state-law data-minimization, purpose-limitation, or consumer-rights duty under Part VI at all.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

FDBR binds only a 'controller': a for-profit entity conducting business in Florida that collects personal data and determines the purposes and means of processing, that also makes in excess of $1 billion in global gross annual revenue and additionally either derives 50 percent or more of its global gross annual revenue from online advertising, operates a consumer smart speaker and voice command service with an integrated virtual assistant, or operates an app store or digital distribution platform offering at least 250,000 applications.

This conjunctive-then-disjunctive threshold excludes essentially every business below $1 billion in global revenue, the overwhelming majority of controllers a peer state's comprehensive act would reach. Outside this narrow platform set, Florida imposes no state-law data-minimization, purpose-limitation, or consumer-rights duty on personal-data processing at all.

When LexLint raises it

automated_outreach
crawls_web
deploys_chatbot
processes_biometrics
processes_voice
trains_models

Read the law

official Florida statute text, Florida Statutes, Florida Legislature

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app