United States of America: Rejected Florida Consumer Data Privacy Act

On 11 March 2022, the Consumer Data Privacy Act (House Bill 9) is rejected by the Florida Senate after failing to pass before the end of the legislative session. The bill originally required data controllers to set up reasonable security measures and to provide notice in case of the collection of consumers' personal information. Furthermore, data controllers were prohibited from processing certain types of sensitive data (including data gathered from a child). Moreover, the bill allowed consumers to opt-out of the sale of their own personal data and the processing for certain purposes. The law would have allowed the Department of Legal Affairs to enforce the provisions against data controllers and processors that pursue unlawful data practices according to the bill.