(1) A controller shall provide consumers with a reasonably accessible and clear privacy notice, updated at least annually, that includes all of the following information:

(a) The categories of personal data processed by the controller, including, if applicable, any sensitive data processed by the controller.

Ask a consumer protection question, get an answer ASAP!
Thousands of highly rated, verified consumer protection lawyers.
Help with credit card debt, collections, defective products
Get help with bankruptcy, filing complaints, extended warranties & more
Click here to chat with a lawyer about your rights.

Terms Used In Florida Statutes 501.711

  • Appeal: A request made after a trial, asking another court (usually the court of appeals) to decide whether the trial was conducted properly. To make such a request is "to appeal" or "to take an appeal." One who appeals is called the appellant.
  • Biometric data: means data generated by automatic measurements of an individual's biological characteristics. See Florida Statutes 501.702
  • Consumer: means an individual who is a resident of or is domiciled in this state acting only in an individual or household context. See Florida Statutes 501.702
  • Controller: means :
    (a) A sole proprietorship, partnership, limited liability company, corporation, association, or legal entity that meets the following requirements:
  • Personal data: means any information, including sensitive data, which is linked or reasonably linkable to an identified or identifiable individual. See Florida Statutes 501.702
  • processing: means an operation or set of operations performed, whether by manual or automated means, on personal data or on sets of personal data, such as the collection, use, storage, disclosure, analysis, deletion, or modification of personal data. See Florida Statutes 501.702
  • Sale of personal data: means the sharing, disclosing, or transferring of personal data for monetary or other valuable consideration by the controller to a third party. See Florida Statutes 501.702
  • Sensitive data: means a category of personal data which includes any of the following:
    (a) Personal data revealing an individual's racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, or citizenship or immigration status. See Florida Statutes 501.702
  • Targeted advertising: means displaying to a consumer an advertisement selected based on personal data obtained from that consumer's activities over time across affiliated or unaffiliated websites and online applications used to predict the consumer's preferences or interests. See Florida Statutes 501.702
(b) The purpose of processing personal data.
(c) How consumers may exercise their rights under s. 501.705(2), including the process by which a consumer may appeal a controller’s decision with regard to the consumer’s request.
(d) If applicable, the categories of personal data that the controller shares with third parties.
(e) If applicable, the categories of third parties with whom the controller shares personal data.
(f) A description of the methods specified in s. 501.709 by which consumers can submit requests to exercise their consumer rights under this part.
(2) If a controller engages in the sale of personal data that is sensitive data, the controller must provide the following notice: “NOTICE: This website may sell your sensitive personal data.” The notice must be posted in accordance with subsection (1).
(3) If a controller engages in the sale of personal data that is biometric data, the controller must provide the following notice: “NOTICE: This website may sell your biometric personal data.” The notice must be posted in accordance with subsection (1).
(4) If a controller sells personal data to third parties or processes personal data for targeted advertising, the controller must clearly and conspicuously disclose that process and the manner in which a consumer may exercise the right to opt out of that process.
(5) A controller may not collect additional categories of personal information or use personal information collected for additional purposes without providing the consumer with notice consistent with this section.