Summary of CS for CS for SB 262 (2nd Engrossed)

• Prohibits government entities from requesting social media platforms remove content or accounts, with exceptions for routine account management, crime-related content, and imminent harm prevention.

• Establishes the "Florida Digital Bill of Rights" requiring large technology companies (controllers) processing personal data to provide consumers rights including access, correction, deletion, data portability, and opt-out rights for targeted advertising and data sales.

• Protects children under 18 by prohibiting online platforms from processing personal data that poses substantial harm or privacy risk, collecting unnecessary data, using dark patterns, or collecting precise location data without strict necessity.

• Requires controllers to implement data protection assessments, maintain data security, provide privacy notices, and adopt data retention schedules limiting storage to 2 years after last consumer interaction unless exempt.

• Grants the Department of Legal Affairs enforcement authority with civil penalties up to $50,000 per violation (tripled for violations involving children or failure to honor deletion/opt-out requests), and preempts local privacy regulations.