Florida Statutes 501.716 – Exemptions for certain uses of consumer personal data
Current as of: 2024 | Check for updates
|
Other versions
(1) This part may not be construed to restrict a controller‘s or processor‘s ability to do any of the following:
(a) Comply with federal or state laws, rules, or regulations.
Terms Used In Florida Statutes 501.716
- Bankruptcy: Refers to statutes and judicial proceedings involving persons or businesses that cannot pay their debts and seek the assistance of the court in getting a fresh start. Under the protection of the bankruptcy court, debtors may discharge their debts, perhaps by paying a portion of each debt. Bankruptcy judges preside over these proceedings.
- Child: means an individual younger than 18 years of age. See Florida Statutes 501.702
- Consumer: means an individual who is a resident of or is domiciled in this state acting only in an individual or household context. See Florida Statutes 501.702
- Contract: A legal written agreement that becomes binding when signed.
- control: means :1. See Florida Statutes 501.702
- Controller: means :
(a) A sole proprietorship, partnership, limited liability company, corporation, association, or legal entity that meets the following requirements:1. See Florida Statutes 501.702- Fraud: Intentional deception resulting in injury to another.
- Guardian: A person legally empowered and charged with the duty of taking care of and managing the property of another person who because of age, intellect, or health, is incapable of managing his (her) own affairs.
- Oversight: Committee review of the activities of a Federal agency or program.
- Personal data: means any information, including sensitive data, which is linked or reasonably linkable to an identified or identifiable individual. See Florida Statutes 501.702
- processing: means an operation or set of operations performed, whether by manual or automated means, on personal data or on sets of personal data, such as the collection, use, storage, disclosure, analysis, deletion, or modification of personal data. See Florida Statutes 501.702
- Processor: means a person who processes personal data on behalf of a controller. See Florida Statutes 501.702
- Prosecute: To charge someone with a crime. A prosecutor tries a criminal case on behalf of the government.
- Subpoena: A command to a witness to appear and give testimony.
- Summons: Another word for subpoena used by the criminal justice system.
- Third party: means a person, other than the consumer, the controller, the processor, or an affiliate of the controller or processor. See Florida Statutes 501.702
(b) Comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, local, or other governmental authorities.(c) Investigate, establish, exercise, prepare for, or defend legal claims.(d) Provide a product or service specifically requested by a consumer or the parent or guardian of a child; perform a contract to which the consumer is a party, including fulfilling the terms of a written warranty; or take steps at the request of the consumer before entering into a contract.(e) Take immediate steps to protect an interest that is essential for the life or physical safety of the consumer or of another individual and in which the processing cannot be manifestly based on another legal basis.(f) Prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or any illegal activity.(g) Preserve the integrity or security of systems or investigate, report, or prosecute those responsible for breaches of system security.(h) Engage in public or peer-reviewed scientific or statistical research in the public interest which adheres to all other applicable ethics and privacy laws and is approved, monitored, and governed by an institutional review board or similar independent oversight entity that determines:1. Whether the deletion of the information is likely to provide substantial benefits that do not exclusively accrue to the controller;2. Whether the expected benefits of the research outweigh the privacy risks; and3. Whether the controller has implemented reasonable safeguards to mitigate privacy risks associated with research, including any risks associated with reidentification.(i) Assist another controller, processor, or third party in complying with the requirements of this part.(j) Disclose personal data disclosed when a consumer uses or directs the controller to intentionally disclose information to a third party or uses the controller to intentionally interact with a third party. An intentional interaction occurs when the consumer intends to interact with the third party by one or more deliberate interactions. Hovering over, muting, pausing, or closing a given piece of content does not constitute a consumer’s intent to interact with a third party.(k) Transfer personal data to a third party as an asset that is part of a merger, an acquisition, a bankruptcy, or other transaction in which the third party assumes control of all or part of the controller, provided that the information is used or shared in a manner consistent with this part. If a third party materially alters how it uses or shares the personal data of a consumer in a manner that is materially inconsistent with the commitments or promises made at the time of collection, it must provide prior notice of the new or changed practice to the consumer. The notice must be sufficiently prominent and robust to ensure that consumers can easily exercise choices consistent with this part.(2) This part may not be construed to prevent a controller or processor from providing personal data concerning a consumer to a person covered by an evidentiary privilege under the laws of this state as part of a privileged communication.(3) This part may not be construed as imposing a requirement on controllers and processors which adversely affects the rights or freedoms of any person, including the right of free speech.(4) This part may not be construed as requiring a controller, processor, third party, or consumer to disclose a trade secret.