FDBR

Overview

Florida's FDBR has the narrowest applicability among US state privacy laws, effectively targeting only major technology companies through its $1 billion revenue threshold and additional digital business criteria. However, it has the highest base penalty ($50,000) and treble damages ($150,000) for violations involving children.

What This Means for Your Website

• Only applicable to very large tech companies ($1B+ revenue with specific digital business criteria)
• Highest base penalty among US states: $50,000 per violation
• Treble damages ($150,000) for violations involving children
• Consumer rights include opting out of targeted advertising, data sales, and profiling
• Smart speaker and virtual assistant surveillance restrictions apply

Key Requirements

The Florida AG enforces the FDBR with penalties up to $50,000 per violation, tripling to $150,000 for children's data violations. A discretionary 45-day cure period applies except for known violations involving children. The narrow applicability means only a handful of companies are directly subject.

How ConsentStack Handles This

ConsentStack applies Florida's opt-out model for applicable businesses, with enhanced protections for children's data to avoid treble penalty exposure.