74%
of Florida's 19 requirements are already met by California (CA). Here is what FDBR adds, biggest gaps first.
Sensitive dataSensitive data and minorsGap
CA0 Broad sensitive personal information list, including neural data, IDs and financial log-ins; consumers get a right to limit use rather than opt-in consent.
FDBR adds1 Opt-in consent to process or sell sensitive data (race, religion, health, sexual orientation, immigration, genetic, biometric, known child, precise geolocation).
Fla. Stat. §§ 501.702(31), 501.71(2)(d), 501.715 · source ↗
Children and teensSensitive data and minorsGap
CA2 Opt-in consent needed to sell or share data of consumers under 16: parental consent under 13, the teen's own consent for ages 13 to 15.
FDBR adds3 Child means under 18; under-13 data follows COPPA, and ages 13 to 17 must give affirmative authorization to process or sell sensitive data.
Fla. Stat. §§ 501.702(6), 501.71(2)(d), 501.715 · source ↗
AppealsConsumers' rightsGap
CA0 No statutory appeal process for denied requests.
FDBR adds1 Internal appeal; controller must answer in writing within 60 days. No AG contact route is required in the appeal section.
Fla. Stat. § 501.707 · source ↗
De-identified dataBusiness dutiesGap
CA2 Deidentified data requires reasonable measures, a public commitment not to reidentify, and contract flow-down to recipients.
FDBR adds3 Deidentified data must stay deidentified with contract and process controls; pseudonymous data exempt with separation; disclosers must oversee contracts.
Fla. Stat. § 501.714 · source ↗
Maximum penaltyEnforcementGap
CA2 Up to $2,663 per violation and $7,988 per intentional violation or violation involving known minors under 16 (2025 adjusted).
FDBR adds3 Up to $50,000 per violation, tripled for child-related, deletion or correction failures, and selling after opt-out.
Fla. Stat. § 501.72(1) · source ↗
Already covered by CA: Thresholds, Exemptions, Data minimization, Rights, Request deadline, Universal opt-out, Assessments, Processor contracts, Privacy notice, Loyalty programs, Who enforces, Cure period, Private action, Rulemaking.
A gap means FDBR is more demanding than CA on that requirement, on our 0 to 3 scale (how we score). Read the cited section before acting. Not legal advice.
