The Digital Bill of Rights, signed by Governor Ron DeSantis in June 2023 and effective July 1, 2024, applies to for-profit entities generating over $1 billion in annual global revenue that operate digital platforms with at least 250,000 applications. Roku qualifies as a covered "controller" under the statute. The law prohibits collecting or retaining personal information beyond what is necessary for a requested service unless the platform demonstrates a compelling reason that poses no substantial risk to children. The Department of Legal Affairs holds exclusive enforcement authority and can impose civil penalties up to $50,000 per violation, with damages potentially trebled for violations involving child protections.
Attorneys should monitor this settlement as a signal of Florida's active enforcement posture on digital privacy. The FDBR's opt-out rights for children and restrictions on geolocation data collection now carry real compliance costs. Other large platforms operating in Florida should expect similar scrutiny and should audit their data practices, privacy notices, and parental control mechanisms against the statute's requirements. The settlement suggests the state prefers negotiated compliance over maximum penalties, but companies that delay remediation risk escalating enforcement action.