74%
of Florida's 19 requirements are already met by California (CA). Here is what FDBR adds, biggest gaps first.
Datos sensiblesDatos sensibles y menoresGap
CA0 Broad sensitive personal information list, including neural data, IDs and financial log-ins; consumers get a right to limit use rather than opt-in consent.
FDBR adds1 Opt-in consent to process or sell sensitive data (race, religion, health, sexual orientation, immigration, genetic, biometric, known child, precise geolocation).
Fla. Stat. §§ 501.702(31), 501.71(2)(d), 501.715 · source ↗
Menores y adolescentesDatos sensibles y menoresGap
CA2 Opt-in consent needed to sell or share data of consumers under 16: parental consent under 13, the teen's own consent for ages 13 to 15.
FDBR adds3 Child means under 18; under-13 data follows COPPA, and ages 13 to 17 must give affirmative authorization to process or sell sensitive data.
Fla. Stat. §§ 501.702(6), 501.71(2)(d), 501.715 · source ↗
ApelacionesDerechos de los consumidoresGap
CA0 No statutory appeal process for denied requests.
FDBR adds1 Internal appeal; controller must answer in writing within 60 days. No AG contact route is required in the appeal section.
Fla. Stat. § 501.707 · source ↗
Datos desidentificadosObligaciones de las empresasGap
CA2 Deidentified data requires reasonable measures, a public commitment not to reidentify, and contract flow-down to recipients.
FDBR adds3 Deidentified data must stay deidentified with contract and process controls; pseudonymous data exempt with separation; disclosers must oversee contracts.
Fla. Stat. § 501.714 · source ↗
Sanción máximaAplicación de la leyGap
CA2 Up to $2,663 per violation and $7,988 per intentional violation or violation involving known minors under 16 (2025 adjusted).
FDBR adds3 Up to $50,000 per violation, tripled for child-related, deletion or correction failures, and selling after opt-out.
Fla. Stat. § 501.72(1) · source ↗
Already covered by CA: Thresholds, Exemptions, Data minimization, Rights, Request deadline, Universal opt-out, Assessments, Processor contracts, Privacy notice, Loyalty programs, Who enforces, Cure period, Private action, Rulemaking.
A gap means FDBR is more demanding than CA on that requirement, on our 0 to 3 scale (how we score). Read the cited section before acting. Not legal advice.
