Law / United States / 
Florida
Local Government Cybersecurity Act, cybersecurity standards, training and compliance notice
Local Government Cybersecurity Act, § 282.3185(3), (4)
In force since .
A sector security regimes rule binding government bodies.
- Obligation class
- Security, Governance
As of .
What it requires
- This binds each county and each municipality (section 282.3185(2)).
- Adopt cybersecurity standards that safeguard the local government's data, information technology and information technology resources to ensure availability, confidentiality and integrity, and that are consistent with generally accepted best practices, including the NIST Cybersecurity Framework.
- Adopt the standards by for a county with a population of 75,000 or more or a municipality with a population of 25,000 or more, and by for a smaller county or municipality.
- Notify the Florida Digital Service of your compliance with the standards requirement as soon as possible.
- Have every employee with access to the local government's network complete basic cybersecurity training within 30 days after commencing employment and annually thereafter.
- Have every technology professional, and every employee with access to highly sensitive information, complete advanced cybersecurity training within 30 days after commencing employment and annually thereafter.
These lines are LexLint's reading of the law's text, as of .
What this law does
Section 282.3185 of the Florida Statutes, the Local Government Cybersecurity Act, defines a local government as any county or municipality. Each local government must adopt cybersecurity standards that safeguard its data, information technology, and information technology resources to ensure availability, confidentiality, and integrity.
The cybersecurity standards must be consistent with generally accepted best practices for cybersecurity, including the National Institute of Standards and Technology Cybersecurity Framework. A county with a population of 75,000 or more had to adopt the standards by , and a county with a smaller population by .
A municipality with a population of 25,000 or more had to adopt the standards by , and a municipality with a smaller population by . Each local government must notify the Florida Digital Service of its compliance with the standards requirement as soon as possible. All local government employees with access to the local government's network must complete the basic cybersecurity training within 30 days after commencing employment and annually thereafter.
All local government technology professionals and employees with access to highly sensitive information must complete the advanced cybersecurity training within 30 days after commencing employment and annually thereafter.