FL H0381

Requires loan originators, mortgage brokers, mortgage lenders, and money services businesses to develop comprehensive written information security programs to protect customer data and information systems, with requirements scaled to business size and complexity

Mandates written incident response plans for cybersecurity events, including notification to the Office of Financial Regulation within 30 days for breaches affecting 500 or more Florida individuals

Strengthens disciplinary actions for money services businesses, making emergency license suspension mandatory (rather than discretionary) when businesses pose immediate danger to public safety, including failure to maintain required records or federally insured accounts

Establishes data security requirements for financial institutions, requiring reasonable measures to protect personal information and breach notifications to the Office of Financial Regulation, Department of Legal Affairs, affected individuals, and credit reporting agencies

Modernizes credit union and bank regulations by allowing virtual membership meetings without in-person quorum requirements, removing investment limitations on credit union real estate and equipment, and extending director experience requirements from 5 to 10 years