FL H0699

Creates s. 1006.1494, F.S., the "Student Online Personal Information Protection Act," which prohibits operators of websites, online services, and apps designed or used primarily for K-12 school purposes from engaging in targeted advertising, selling or renting student covered information, or using covered information to build student profiles for non-school purposes.

Defines "covered information" broadly to include non-public personally identifying student data such as educational records, names, addresses, biometric information, grades, discipline records, health records, social security numbers, geolocation data, and other sensitive information collected through K-12 school platforms.

Requires operators to collect only the minimum covered information reasonably necessary, implement and maintain reasonable security procedures, and delete a student's covered information within 90 days after the student is no longer enrolled in the district unless a parent or guardian expressly consents to retention.

Permits limited disclosure of covered information for purposes such as furthering K-12 school objectives, complying with state or federal law or court orders, protecting user safety, and sharing with contracted third parties who are contractually bound to restrict further use and disclosure of the data.

Classifies any violation as a deceptive and unfair trade practice under the Florida Deceptive and Unfair Trade Practices Act, with the Department of Legal Affairs designated as the sole entity authorized to bring enforcement actions; effective date is July 1, 2023.