FL S1854

Prohibits Internet service providers from using, disclosing, selling, or permitting external access to customer personal information without prior opt-in consent, effective July 1, 2019.

Requires providers to obtain clear, conspicuous consent through easily accessible mechanisms (website, mobile app, or toll-free number) that customers can revoke at any time at no cost.

Defines "customer personal information" to include billing data, government IDs, contact information, demographic data, financial/health information, browsing history, IP addresses, geolocation, and device identifiers.

Prohibits providers from penalizing customers who refuse consent, offering discounts for providing consent, or refusing to disclose a customer's personal information upon written request.

Allows limited use of customer information without consent for broadband service delivery, legal compliance, billing, fraud prevention, emergency services, and marketing communications-related services (with opt-out option).

Permits generation and use of aggregate customer information with individual identities removed, and requires providers to implement reasonable security procedures to protect customer data.