# Florida — US state consumer data privacy laws: applicability thresholds by state

For Florida, law name and abbreviation is Florida Digital Bill of Rights (FDBR); effective date is July 1, 2024; revenue floor is Makes in excess of $1 billion in global gross annual revenues; threshold combination logic is AND — requires $1 billion+ in global gross annual revenues AND satisfies at least one additional criterion (50%+ revenue from online ads, operates a smart speaker with virtual assistant, or operates an app store with 250,000+ apps); key exemptions is State agencies and political subdivisions; GLBA-regulated financial institutions; HIPAA-covered entities and business associates; nonprofit organizations; postsecondary education institutions, recorded from its source on 2026-08-12.

- **State:** Florida _(our reading, not quoted from the source)_
- **Law name and abbreviation:** Florida Digital Bill of Rights (FDBR)
- **Effective date:** July 1, 2024
- **Revenue floor:** Makes in excess of $1 billion in global gross annual revenues _(verified: appears in the quote below)_
- **Threshold combination logic:** AND — requires $1 billion+ in global gross annual revenues AND satisfies at least one additional criterion (50%+ revenue from online ads, operates a smart speaker with virtual assistant, or operates an app store with 250,000+ apps)
- **Key exemptions:** State agencies and political subdivisions; GLBA-regulated financial institutions; HIPAA-covered entities and business associates; nonprofit organizations; postsecondary education institutions
- **Enforcement mechanism:** Department of Legal Affairs (Attorney General); civil penalties of $50,000 per violation or treble damages; no private right of action
- **Statute citation:** Fla. Stat. §§ 501.701 to 501.721
- **Notes:** Florida has by far the highest revenue threshold of any state at $1 billion in global gross annual revenues, effectively limiting the law to large technology companies. Additionally, the business must satisfy at least one of three criteria: deriving 50%+ of global revenue from online advertising, operating a consumer smart speaker with a virtual assistant, or operating an app store with at least 250,000 apps. This narrow scope means the law applies to very few companies.

## What the source says

> Makes in excess of $1 billion in global gross annual revenues; and 6.  Satisfies at least one of the following: a.  Derives 50 percent or more of its global gross annual revenues from the sale of advertisements online, including providing targeted advertising or the sale of ads online; b.  Operates a consumer smart speaker and voice command component service with an integrated virtual assistant connected to a cloud computing service that uses hands-free verbal activation.

## Source

- https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&Search_String=&URL=0500-0599/0501/Sections/0501.702.html

Last verified: 2026-08-12. Review by: 2026-11-10.
Part of [US state consumer data privacy laws: applicability thresholds by state](https://referencesource.org/state-data-privacy-applicability-thresholds/).