---
title: "Florida privacy law: enforcement"
canonical: "https://dposchool.com/state-privacy-laws/state/florida/enforcement"
source: "http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html"
text_as_of: "2026-10-28"
last_reviewed: "2026-10-29"
language: "en-US"
publisher: "DPO School"
---

Florida Digital Bill of Rights

# Florida privacy law: enforcement

Law as of October 28, 2026 · [Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/state-privacy-laws/about#review)

## Summary (not the statute text)

Only the Department of Legal Affairs (the Attorney General) enforces the law, treating violations as unfair or deceptive trade practices. Civil penalties reach $50,000 per violation and may be tripled for violations involving a known child, failures to delete or correct, and continued selling or sharing after an opt-out. The Department may grant a 45-day cure period at its discretion, never for violations involving known children. There is no private right of action.

## Key points

1. Exclusive enforcement by the Department of Legal Affairs under the deceptive trade practices act.

   Section: [Fla. Stat. § 501.72(1)](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html)

2. Civil penalty up to $50,000 per violation, in addition to other remedies.

   Section: [Fla. Stat. § 501.72(1)](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html)

3. Penalties may be tripled for violations involving a known child, failure to delete or correct, or continued sale or sharing after opt-out.

   Section: [Fla. Stat. § 501.72(1)(a)-(c)](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html)

4. Discretionary 45-day cure after written notice; not available for violations involving a known child.

   Section: [Fla. Stat. § 501.72(2)](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html)

5. Annual public enforcement report due by February 1.

   Section: [Fla. Stat. § 501.72(4)](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html)

6. No private cause of action.

   Section: [Fla. Stat. § 501.72(8)](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html)

## Sources

- [http://www.leg.state.fl.us/statutes/index.cfm?App\_mode=Display\_Statute&URL=0500-0599/0501/Sections/0501.72.html](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/Sections/0501.72.html)

[Compare enforcement across all states](https://dposchool.com/state-privacy-laws/topic/enforcement)

## Related GDPR articles

Related, not equivalent: the GDPR and the state laws differ in scope, terms and exceptions.

- [Article 83: General conditions for imposing administrative fines](https://dposchool.com/gdpr/article/83) (enforcement)

## Status

Law as of October 28, 2026.

[Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/state-privacy-laws/about#review). Prepared from the official sources listed.

[Official text of the Florida statute](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html)

Reference material, not legal advice.

## Other topics for Florida

- [Applicability](https://dposchool.com/state-privacy-laws/state/florida/applicability)
- [Consumer rights](https://dposchool.com/state-privacy-laws/state/florida/consumer-rights)
- [Sensitive data](https://dposchool.com/state-privacy-laws/state/florida/sensitive-data)
- [Controller duties](https://dposchool.com/state-privacy-laws/state/florida/controller-duties)
- [Processors](https://dposchool.com/state-privacy-laws/state/florida/processors)

## Navigation

[US State Privacy Laws](https://dposchool.com/state-privacy-laws) / [Florida](https://dposchool.com/state-privacy-laws/state/florida) / Enforcement

Previous: [Processors](https://dposchool.com/state-privacy-laws/state/florida/processors)

Learning US privacy law? An audio course on the privacy law that applies to US businesses: [US Privacy in Practice](https://dposchool.com/learn/courses/us-privacy-in-practice). More from [DPO School](https://dposchool.com).

## For AI agents

- Machine-readable index: https://dposchool.com/state-privacy-laws/llms.txt
- JSON API: https://dposchool.com/state-privacy-laws/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents