Florida Digital Bill of Rights

Florida Digital Bill of Rights - large-controller obligations, consumer rights, sensitive data, opt-out.


Short name	FL DBR
Region	Americas
Country or scope	United States
Sector	Privacy
In your workspace	On unless you switch it off in Compliance › Manage.

How Safeguard covers FL DBR

Scan requirements: 6, all decided by a scan.
Controls: the scan requirements below, plus 8 controls from Safeguard's control catalog for FL DBR.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 25: 3 written for FL DBR and 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

What a scan checks

Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`FL-DBR-SEC` Data Security Practices	Covered controllers must establish, implement and maintain reasonable administrative, technical and physical data security practices appropriate to the personal data processed; for billion-dollar-scale platforms the expected integrity bar is high (Fla. Stat. §§ 501.701-501.722, controller-duties provisions)	Scan
`FL-DBR-MIN` Collection Limitation Accountability	Collection must be limited to what is adequate, relevant and reasonably necessary for disclosed purposes; a named processing platform with enumerated software components is the evidentiary basis at platform scale (Fla. Stat. §§ 501.701-501.722, controller-duties provisions)	Scan
`FL-DBR-PROC` Processor Obligations	Processors act under binding contracts with controller instructions and equivalent duties flowed to subcontractors; naming the supplier of each third-party component demonstrates that oversight (Fla. Stat. §§ 501.701-501.722, processor provisions)	Scan
`FL-DBR-DPIA` Data Protection Assessment Readiness	Data protection assessments are required for heightened-risk processing including targeted advertising, sale, profiling and sensitive data; recorded versions of the processing software underpin credible assessment (Fla. Stat. §§ 501.701-501.722, data protection assessment provisions)	Scan
`FL-DBR-RIGHTS` Consumer Rights Fulfilment	Consumers may confirm processing, access, correct, delete and port personal data, and opt out of targeted advertising, sale, profiling and, distinctively, the collection of data through voice- and facial-recognition features; executing these requires unambiguous identification of the components involved (Fla. Stat. §§ 501.701-501.722, consumer-rights provisions)	Scan
`FL-DBR-TRANS` Platform Transparency Documentation	Beyond the standard privacy notice, the act imposes transparency duties on large platforms, including search engines describing their ranking parameters; identified, timestamped system documentation is the foundation for such disclosures (Fla. Stat. §§ 501.701-501.722, transparency provisions)	Scan

More controls in the catalog

The framework's Controls tab lists its scan requirements and these controls from Safeguard's control catalog. Evidence them with automated tests, uploaded evidence, policies or an attestation.

Control	Name
`FL-501.701`	Consumer Rights: Access, Deletion & Portability
`FL-501.702`	Opt-Out of Sale, Targeted Advertising & Profiling
`FL-501.703`	Sensitive Data: Opt-In Consent
`FL-501.704`	Data Protection Assessment
`FL-501.705`	Processor Agreements
`FL-501.706`	Privacy Notice & Opt-Out Link
`FL-501.707`	Children's Data: Under 18 Sale Prohibition
`FL-501.708`	Security & Breach Response

Policy templates

Written for FL DBR:

Florida DBR State Privacy Notice
Florida DBR Consumer Rights Request Handling Procedure
Florida DBR Sensitive Data Consent Policy

And 22 from the standard set, adapted to FL DBR.