
What Is the FDBR? Florida Digital Bill of Rights
The FDBR (Fla. Stat. 501.701 et seq.) took effect July 1, 2024, with the narrowest controller test in the US: over $1B revenue plus a big-tech prong.
Loading...
Browse our full library of legal guides, state law breakdowns, and practical legal information.
11260 articles
Browse by Category →
The FDBR (Fla. Stat. 501.701 et seq.) took effect July 1, 2024, with the narrowest controller test in the US: over $1B revenue plus a big-tech prong.

RIDTPPA (R.I. Gen. Laws 6-48.1) compliance: coverage at 35,000 customers, the 6-48.1-3 third-party disclosure, opt-in sensitive data, and AG-only enforcement.

Rhode Island's RIDTPPA (6-48.1-5) gives access, correction, deletion, portability, and opt-out rights; controllers must answer within 45 days. AG enforces.

The RIDTPPA (R.I. Gen. Laws 6-48.1) takes effect Jan 1, 2026, with a 35,000-customer threshold, opt-in sensitive data, and a unique third-party disclosure duty.

KCDPA compliance (KRS 367.3611 to 367.3629): coverage, privacy notice, opt-in sensitive data, 45-day requests, assessments, processor contracts, 30-day cure.

Under the KCDPA (KRS 367.3615), Kentuckians can access, correct, delete, port, and opt out of data sales; controllers must respond within 45 days.

The KCDPA (KRS 367.3611 to 367.3629) takes effect January 1, 2026, a close clone of Virginia's law with a 100,000-consumer threshold and opt-in sensitive data.

An INCDPA compliance checklist: IC 24-15 thresholds, privacy notice, opt-in sensitive data, 45-day requests, assessments, and the permanent 30-day cure before Jan. 1, 2026.

Indiana's INCDPA (IC 24-15-3-1) gives residents access, correction, deletion, portability, and opt-out rights starting Jan. 1, 2026, with a 45-day response window.

The Indiana Consumer Data Protection Act (IC 24-15) takes effect Jan. 1, 2026, the longest runway of any state privacy law. A Virginia-style INCDPA explainer.

Maryland MODPA compliance: strict-necessity data minimization (Com. Law 14-4607), sensitive-data sale ban, UOOM, assessments, and penalties to $10,000.

Maryland's MODPA (Com. Law 14-4605) grants access, deletion, opt-out, and a 45-day response, plus the strictest sensitive-data and minimization protections in the US.