Florida Accessibility & Privacy Laws

Florida has specific accessibility requirements for state agency websites and privacy protections under the Florida Information Protection Act. All businesses in Florida are also subject to federal ADA requirements.

Legal Note

The Eleventh Circuit (covering Florida, Georgia, and Alabama) has taken a narrower view of ADA web accessibility coverage following the Winn-Dixie appeal. However, businesses with physical locations still face significant litigation risk, and Florida state agencies have specific accessibility requirements.

Accessibility Requirements

State Agency Requirements

Florida state agencies are required to make their websites accessible under:

  • Florida Statutes Section 282.603: Electronic government services must be accessible to persons with disabilities
  • Florida Administrative Code: State technology standards include accessibility requirements
  • Federal funding requirements: Section 504 applies to all state programs receiving federal funds
Covered Entities:
  • All Florida state agencies
  • State universities and colleges
  • County and municipal governments
  • State contractors providing digital services
  • K-12 public schools
Private Sector Requirements

Private businesses in Florida are subject to:

  • ADA Title III: Places of public accommodation must be accessible (though Eleventh Circuit's Winn-Dixie decision limited website-specific claims)
  • Federal contractor requirements: Section 503 and Section 508 for federal contractors
  • Industry-specific regulations: DOT (airlines), FCC (telecommunications), etc.
Winn-Dixie Impact: Following the Eleventh Circuit's reversal in Gil v. Winn-Dixie, website-only ADA claims face additional hurdles in Florida. However, plaintiffs may still bring claims showing that website barriers impede access to physical locations, and state law claims remain available.

Privacy Laws

Florida Information Protection Act (FIPA)

Florida Statutes Section 501.171 provides data breach notification requirements:

Key Provisions:
  • Breach notification: 30 days to notify affected individuals
  • Covered data: Social Security numbers, financial account numbers, medical information
  • Applies to: Any entity that acquires, maintains, or stores personal information of Florida residents
  • Attorney General notification: Required for breaches affecting 500+ Florida residents
Penalties:
  • $1,000/day for first 30 days of violation
  • $50,000/each 30-day period thereafter
  • Maximum penalty: $500,000 per breach
Florida Digital Bill of Rights (2023)

Florida Senate Bill 262 (effective July 1, 2024) provides comprehensive privacy rights:

Consumer Rights:
  • Right to confirm whether data is being processed
  • Right to access personal data
  • Right to correct inaccurate data
  • Right to delete personal data
  • Right to data portability
  • Right to opt out of targeted advertising
  • Right to opt out of sale of personal data
Applicability Thresholds:
  • Annual revenues over $1 billion, OR
  • 50%+ revenue from targeted advertising and processes 25,000+ consumers' data, OR
  • Operates app store/digital marketplace with 250,000+ downloads
Children's Data Protections:
  • Special protections for users under 18
  • Parental consent requirements for under 13
  • Opt-in required for processing sensitive data of minors
Note: The Florida Digital Bill of Rights has high revenue thresholds, meaning it applies primarily to large technology companies rather than small businesses.

Key Statistics

3+ Million

Florida residents with disabilities

30 Days

FIPA breach notification deadline

$500K

Maximum FIPA penalty per breach

Enforcement & Litigation

Recent Developments in Florida:
  • Gil v. Winn-Dixie (2021): Eleventh Circuit reversed plaintiff victory, creating circuit split on ADA web accessibility
  • State agency enforcement: Florida agencies continue to face Section 504 obligations
  • FIPA enforcement: Florida Attorney General actively enforces breach notification requirements
Practical Implications:
  • ADA website lawsuits in Florida face additional hurdles after Winn-Dixie
  • Plaintiffs may file in other circuits or focus on physical barrier connections
  • State agencies should still comply with WCAG 2.1 Level AA
  • Businesses should maintain accessibility as a best practice

Compliance Recommendations

Accessibility
  • Conduct accessibility audit (WCAG 2.1 AA)
  • Remediate high-priority issues
  • Implement ongoing monitoring
  • Publish accessibility statement
  • Train developers on accessibility
Privacy
  • Develop incident response plan
  • Implement breach detection capabilities
  • Prepare notification templates
  • Review vendor contracts
  • Train employees on data handling
Florida Quick Facts
Population
22+ million
Key Privacy Law
FIPA, FL Digital Bill of Rights
Accessibility Standard
WCAG 2.1 AA (state agencies)
Circuit
Eleventh (Winn-Dixie)