FL H0279

Requires all public agencies and private entities in Florida that collect personal information (names, SSNs, credit card numbers, addresses, etc.) to follow NIST Special Publication 800-88 guidelines when destroying such data.

Mandates that affected agencies and entities maintain a copy of the NIST Guidelines for Media Sanitization, with electronic copies accessible on the desktop of the chief information officer, security officer, or records management officer.

Requires state agencies to submit samples of sanitized electronic media to independent third-party vendors for verification that data has been properly destroyed.

Directs the Department of Management Services to adopt rules establishing criteria for selecting third-party vendors and procedures for submitting and returning sanitized media samples.

Effective date is July 1, 2010.