Florida legislation · 2026 Regular Session
Florida S692: Cybersecurity Standards and Liability
Status: Chaptered, April 20, 2026
Prohibiting local governments from imposing certain cybersecurity standards or processes on vendors; providing that a local government, a covered entity, or a third-party agent that complies with certain requirements is not liable in connection with a cybersecurity incident under certain circumstances; requiring covered entities and third-party agents to implement revised frameworks, standards, laws, or regulations within a specified timeframe in order to retain protection from liability, etc.
What the bill says
An act relating to cybersecurity standards and liability; amending s. 282.3185, F.S.; prohibiting local governments from imposing certain cybersecurity standards or processes on vendors; defining the term "vendor"; prohibiting local governments from adopting or enforcing certain cybersecurity standards or processes; creating s. 768.401, F.S.; defining terms; providing that a local government, a covered entity, or a third-party agent that complies with certain requirements is not liable in connection with a cybersecurity incident under certain circumstances…
From the introduced text, January 27, 2026:
A bill to be entitled An act relating to cybersecurity standards and liability; amending s. 282.3185, F.S.; prohibiting local governments from imposing certain cybersecurity standards or processes on vendors; defining the term "vendor"; prohibiting local governments from adopting or enforcing certain cybersecurity standards or processes; creating s. 768.401, F.S.; defining terms; providing that a local government, a covered entity, or a third-party agent that complies with certain requirements is not liable in connection with a cybersecurity incident under certain circumstances; requiring covered entities and third-party agents to implement revised frameworks, standards, laws, or regulations within a specified timeframe in order to retain protection from liability; providing that a private cause of action is not established; providing that the fact that a specified defendant could have obtained a liability shield or a presumption against liability is not admissible as evidence of negligence, does not constitute negligence per se, and may not be used as evidence of fault; specifying that the defendant in certain actions has a certain burden of proof; providing applicability; providing a directive to the Division of Law Revision; providing an effective date. Be It Enacted by the Legislature of the State of Florida: Section 1. Paragraph (a) of subsection (4) of section 282.3185, Florida Statutes, is amended to read: 282.3185 Local government cybersecurity.-- (4) CYBERSECURITY STANDARDS.-- (a)1. Each …