FL H7087

Adds public records exemption to section 501.171, F.S. making information received by the Department of Legal Affairs regarding data breach notifications or investigations confidential and exempt until the investigation is completed or ceases to be active.

Allows disclosure during active investigations for official duties, public notification about data breach victims, or to other governmental entities, but exempts certain proprietary information from public release.

Permanently exempts five categories of information after investigation completion: information covered by other exemptions, personal information, computer forensic reports, information revealing data security weaknesses, and proprietary business information.

Defines "proprietary business information" as confidential information owned by covered entities including trade secrets and competitive information that would harm the entity if disclosed and is not publicly available.

Subjects the exemption to the Open Government Sunset Review Act and repeals it on October 2, 2019, unless reenacted by the Legislature; effective date contingent on HB 7085 or similar legislation becoming law.