FL S0586

Requires all public agencies and private entities in Florida that collect personal information (names, Social Security numbers, credit card numbers, etc.) to use NIST Special Publication 800-88 "Guidelines for Media Sanitization" when destroying data on hard drives, optical media, and physical documents.

Mandates all state agencies and private entities subject to these requirements maintain an electronic copy of the NIST sanitization guidelines on the desktop of their chief information officer, security officer, records management officer, or equivalent responsible person.

Requires all state agencies to submit samples of sanitized electronic media to an independent third-party vendor for verification that data has been properly destroyed.

Directs the Department of Management Services to adopt rules establishing criteria for selecting third-party vendors and procedures for submitting and returning media samples.

Effective date: July 1, 2010.