Involved parties: Key actors include Florida Governor Ron DeSantis, who signed SB 264 into law on May 8, 2023; the Florida Legislature; the Agency for Health Care Administration (AHCA), which enforces compliance via licensure affidavits under Fla. Stat. § 408.810(14); and affected healthcare providers, vendors, and licensees under Chapter 408 of Florida Public Health Law.[1][6][9][10][13]
Context and timeline: The law responded to data sovereignty concerns exceeding federal HIPAA standards, which lack geographic storage restrictions.[1][6] Enacted May 2023, it took effect July 1, 2023, requiring immediate compliance audits, vendor reviews, and contract updates; non-compliance risks AHCA disciplinary action.[1][4][7][13] It aligns with trends in state-level health data protections.[1][8]
Newsworthy now: The March 25, 2026, article by Joseph J. Lazzarotti of Jackson Lewis P.C. serves as a compliance reminder nearly three years post-enactment, urging providers to audit data storage amid rising regulatory focus on foreign access to sensitive health information.[1][2][3]