FDBR Compliance: The Florida Digital Bill of Rights, Handled
Florida's privacy law targets the largest tech companies — a $1B revenue threshold. If you're in scope, ConsentPixel makes compliance a one-pixel install.
Florida's Digital Bill of Rights (FDBR) is a comprehensive privacy law with an unusually high revenue threshold — it's aimed squarely at the largest technology companies. If your organization is in scope, ConsentPixel — Privacy · Verified handles opt-outs, universal opt-out signals, privacy documents, and audit-ready logs so FDBR compliance is one pixel away.
What is the FDBR?
The Florida Digital Bill of Rights, enacted as SB 262, took effect on July 1, 2024. It grants Florida residents rights over their personal data and imposes obligations on the businesses that handle it. What sets the FDBR apart is its narrow, "Big Tech" focus: it applies only to controllers with more than $1 billion in global gross annual revenue that also meet one of a few additional criteria.
That threshold means the FDBR reaches far fewer businesses than laws like Texas's or Colorado's. But for companies that do meet it — large advertising-driven platforms, major smart-speaker makers, and large app-store operators — the obligations are real, and Florida has been active in enforcement, particularly around children's data.
The FDBR follows an opt-out model for general personal data, with opt-in consent for sensitive data and special protections for minors.
Who must comply
- For-profit entities that conduct business in Florida (or target Florida residents), collect consumers' personal data, and earn more than $1 billion in global gross annual revenue, and meet at least one of:
- Derive 50% or more of global revenue from selling online advertisements (including targeted advertising); or
- Operate a consumer smart speaker and voice command service with an integrated virtual assistant; or
- Operate an app store or digital distribution platform offering at least 250,000 applications.
- Most small and mid-sized businesses fall outside the FDBR because of the $1 billion threshold.
What the FDBR requires
- Consumer rights: Access, correction, deletion, portability, and opt-out of targeted advertising, sale, and certain profiling.
- Opt-out mechanisms: Provide clear ways to opt out of sale and targeted advertising.
- Sensitive data consent: Obtain consent before processing sensitive personal data.
- Children's data protections: Heightened obligations and penalties around minors' data.
- Transparency: Provide clear privacy disclosures and, for search engines, disclosures about ranking parameters.
The Florida Attorney General enforces the FDBR. Civil penalties can reach up to $50,000 per violation, and up to $150,000 for violations involving children or knowing/willful violations. There is no private right of action.
How ConsentPixel makes you FDBR-compliant
ConsentPixel — Privacy · Verified sits between your visitors and your trackers. It detects what's running, presents a geo-aware consent banner, enforces the visitor's choice, and keeps an immutable record of every decision. Here's how that maps to your obligations:Geo-aware opt-out model. Florida visitors get the opt-out experience the FDBR requires, with sensitive data gated behind consent — especially valuable given Florida's focus on children's data.
Auto-detecting scanner finds every cookie and tracker on your site, so your disclosures and consent categories are complete and accurate — not guesswork.
Signal passthrough drives Google Consent Mode v2, Microsoft UET, Meta Pixel, and IAB TCF 2.3 from a single consent event, so every platform respects the same choice.
GPC honoring recognizes Global Privacy Control opt-out signals and applies them automatically.
Document generator auto-creates Privacy Policy, Cookie Policy, Terms, and DPA documents to support your transparency obligations.
Immutable, tamper-evident logs record every consent decision — audit-ready proof of what each visitor saw and chose.
One pixel, under 5 minutes. Everything above ships from a single pixel install, with a public trust badge and verification page.
Why ConsentPixel
- Auto-detection ensures opt-outs actually suppress the right trackers.
- One pixel handles opt-outs, GPC, documents, and signals together.
- Audit-ready logs give defensible proof for AG enforcement.
- Multi-regulation: the same install covers the other state laws your visitors fall under — useful since most large platforms are subject to many.
Frequently asked questions
Does the FDBR apply to my small business?
Almost certainly not. The FDBR applies only to controllers with more than $1 billion in global gross annual revenue that also meet one of its additional criteria, so it's aimed at very large technology companies.
Why is the FDBR called a "Big Tech" privacy law?
Because of its unusually high revenue threshold and criteria tied to online advertising revenue, smart speakers, and large app stores, the FDBR reaches only a small number of major platforms rather than businesses generally.
What are the penalties under the FDBR?
The Florida Attorney General can seek up to $50,000 per violation, and up to $150,000 for violations involving children or knowing/willful conduct. There is no private right of action.
Does the FDBR require honoring opt-out signals like GPC?
The FDBR provides opt-out rights for sale and targeted advertising. ConsentPixel honors GPC and provides clear opt-out mechanisms to support those rights.
If I'm subject to the FDBR, am I likely subject to other state laws too?
Yes — companies large enough to meet the FDBR threshold typically fall under many state privacy laws. ConsentPixel's multi-regulation approach addresses them from one install.
The bottom line
The FDBR is the rare state law most businesses can rule out on the threshold alone. If you do clear $1 billion and meet one of its criteria, you're almost certainly subject to a dozen other state laws too — so the efficient move is a single multi-regulation consent layer rather than a Florida-only fix.
Make FDBR compliance a one-pixel job
Install ConsentPixel to serve Florida visitors the right opt-out model, honor GPC, generate your privacy documents, and keep audit-ready logs.
Scan your site free Start free trialThis page is informational and is not legal advice. The FDBR is a Florida state law; consult qualified counsel for advice on your specific obligations.