Ver la versión en español aquí
The Florida Information Protection Act went into effect on July 1. The law imposes notification requirements on any business that acquires, maintains, stores or uses personal information when that business suffers a breach of security, i.e., unauthorized access of data in electronic form containing personal information. The statute’s definition of personal information includes the usual suspects – social security number, driver’s license number, passport number, financial or credit card number, and username or email address in combination with a password or security question that would permit access to an online account.
The definition of personal information also includes any information regarding an individual’s medical history, mental or physical condition, or medical treatment or diagnosis, as well as an individual’s health insurance policy number or other unique identifier used by a health insurer. Much of this data is probably in your HR software program or in your paper HR forms that are converted to a digital format. While the Florida Information Protection Act does not specifically cover “employers,” its definitions are broad enough to capture most employers in Florida.









On June 20, 2014, the Department of Labor (“DOL”) announced its proposal to change the 


