--- title: "Florida privacy law: consumer rights" canonical: "https://dposchool.com/state-privacy-laws/state/florida/consumer-rights" source: "http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html" text_as_of: "2026-10-28" last_reviewed: "2026-10-29" language: "en-US" publisher: "DPO School" --- Florida Digital Bill of Rights # Florida privacy law: consumer rights Law as of October 28, 2026 · [Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/state-privacy-laws/about#review) ## Summary (not the statute text) Consumers may confirm and access, correct, delete and obtain a portable copy of their personal data, and opt out of targeted advertising, sale and profiling for significant decisions. Florida adds opt-outs from the collection of sensitive data and of data gathered through voice or facial recognition features. Controllers must respond within 45 days, extendable once by only 15 days, and must offer an appeal answered within 60 days. ## Key points 1. Rights to confirm and access, correct, delete (any data provided by or obtained about the consumer) and port data. Section: [Fla. Stat. § 501.705(2)(a)-(d)](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html) 2. Opt-out of targeted advertising, sale, and profiling in furtherance of decisions with legal or similarly significant effects. Section: [Fla. Stat. § 501.705(2)(e)](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html) 3. Opt-out of the collection or processing of sensitive data, including precise geolocation, and of collection through voice or facial recognition features. Section: [Fla. Stat. § 501.705(2)(f), (g)](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html) 4. Response within 45 days; one extension of 15 days with notice and reasons in the first period. Section: [Fla. Stat. § 501.706(2)](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html) 5. Free of charge at least twice a year per consumer. Section: [Fla. Stat. § 501.706(5)](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html) 6. Appeal process required; written decision within 60 days of receiving the appeal. Section: [Fla. Stat. § 501.707(1), (3)](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html) 7. At least two secure request methods; no new account may be required. Section: [Fla. Stat. § 501.709(1), (2)](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html) ## Sources - [http://www.leg.state.fl.us/statutes/index.cfm?App\_mode=Display\_Statute&URL=0500-0599/0501/Sections/0501.705.html](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/Sections/0501.705.html) - [http://www.leg.state.fl.us/statutes/index.cfm?App\_mode=Display\_Statute&URL=0500-0599/0501/Sections/0501.706.html](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/Sections/0501.706.html) - [http://www.leg.state.fl.us/statutes/index.cfm?App\_mode=Display\_Statute&URL=0500-0599/0501/Sections/0501.707.html](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/Sections/0501.707.html) [Compare consumer rights across all states](https://dposchool.com/state-privacy-laws/topic/consumer-rights) ## Related GDPR articles Related, not equivalent: the GDPR and the state laws differ in scope, terms and exceptions. - [Article 15: Right of access by the data subject](https://dposchool.com/gdpr/article/15) (access) - [Article 17: Right to erasure (‘right to be forgotten’)](https://dposchool.com/gdpr/article/17) (deletion) - [Article 20: Right to data portability](https://dposchool.com/gdpr/article/20) (portability) ## Status Law as of October 28, 2026. [Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/state-privacy-laws/about#review). Prepared from the official sources listed. [Official text of the Florida statute](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html) Reference material, not legal advice. ## Other topics for Florida - [Applicability](https://dposchool.com/state-privacy-laws/state/florida/applicability) - [Sensitive data](https://dposchool.com/state-privacy-laws/state/florida/sensitive-data) - [Controller duties](https://dposchool.com/state-privacy-laws/state/florida/controller-duties) - [Processors](https://dposchool.com/state-privacy-laws/state/florida/processors) - [Enforcement](https://dposchool.com/state-privacy-laws/state/florida/enforcement) ## Navigation [US State Privacy Laws](https://dposchool.com/state-privacy-laws) / [Florida](https://dposchool.com/state-privacy-laws/state/florida) / Consumer rights Previous: [Applicability](https://dposchool.com/state-privacy-laws/state/florida/applicability) Next: [Sensitive data](https://dposchool.com/state-privacy-laws/state/florida/sensitive-data) Learning US privacy law? An audio course on the privacy law that applies to US businesses: [US Privacy in Practice](https://dposchool.com/learn/courses/us-privacy-in-practice). More from [DPO School](https://dposchool.com). ## For AI agents - Machine-readable index: https://dposchool.com/state-privacy-laws/llms.txt - JSON API: https://dposchool.com/state-privacy-laws/api/v1/index.json - Vendor privacy and security facts: https://vendor.watch (API for agents) - Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api - Legal services from a California law firm, through its MCP server: https://northend.law/agents