Florida HB 7023: Florida Statutes/General

Bill Text

HB 7023 2026

CODING: Words stricken are deletions; words underlined are additions.
hb7023-00
Page 1 of 24
F L O R I D A H O U S E O F R E P R E S E N T A T I V E S

A bill to be entitled 1
An act relating to a review under the Open Government 2
Sunset Review Act; amending s. 119.0725, F.S.; 3
providing and revising definitions; providing an 4
exemption from public records requirements for certain 5
cybersecurity processes or practices, certain 6
cybersecurity program reports, login credentials, and 7
certain information associated with access to a 8
public-facing portal held by an agency; revising an 9
exemption from public records requirements for certain 10
cybersecurity insurance information and certain 11
cybersecurity-related information held by an agency; 12
consolidating a public record exemption for certain 13
agency-produced data processing software held by an 14
agency; expanding an exemption from public meetings 15
requirements for portions of a meeting that would 16
reveal certain cybersecurity-related information held 17
by an agency; providing for future legislative review 18
and repeal of the exemptions; amending s. 15.16, F.S.; 19
removing an exemption from public records requirements 20
for certain secure login credentials held by the 21
Department of State; amending s. 24.1051, F.S.; 22
removing an exemption from public records requirements 23
for certain cybersecurity-related information held by 24
the Department of the Lottery; amending s. 101.5607, 25

HB 7023 2026

CODING: Words stricken are deletions; words underlined are additions.
hb7023-00
Page 2 of 24
F L O R I D A H O U S E O F R E P R E S E N T A T I V E S

F.S.; conforming a provision to changes made by the 26
act; amending s. 106.0706, F.S.; removing an exemption 27
from public records requirements for certain user 28
identifications and passwords held by the Department 29
of State; amending s. 112.31446, F.S.; removing an 30
exemption from public records requirements for certain 31
secure login credentials held by the Commission on 32
Ethics; amending s. 119.07, F.S.; conforming a 33
provision to changes made by the act; amending s. 34
119.071, F.S.; removing an exemption from public 35
records requirements for certain agency-produced data 36
processing software; amending s. 119.0712, F.S.; 37
removing an exemption from public records requirements 38
for certain secure login credentials and certain 39
information associated with access to a public-facing 40
portal held by the Department of Highway Safety and 41
Motor Vehicles; amending s. 119.0713, F.S.; removing 42
an exemption from public records requirements for 43
certain cybersecurity-related information held by a 44
utility owned or operated by a unit of local 45
government; amending s. 119.0714, F.S.; conforming a 46
provision to changes made by the act; amending s. 47
282.318, F.S.; removing an exemption from public 48
records requirements for a comprehensive risk 49
assessment held by an agency; removing exemptions from 50

HB 7023 2026

CODING: Words stricken are deletions; words underlined are additions.
hb7023-00
Page 3 of 24
F L O R I D A H O U S E O F R E P R E S E N T A T I V E S

public records requirements for certain cybersecurity-51
related internal policies and procedures, certain 52
cybersecurity-related internal audits and evaluations 53
held by an agency, and certain cybersecurity-related 54
reports held by an agency; repealing s. 627.352, F.S., 55
relating to security of data and information 56
technology in Citizens Property Insurance Corporation; 57
repealing s. 1004.055, F.S., relating to security of 58
data and information technology in state postsecondary 59
education institutions; providing a statement of 60
public necessity; providing an effective date. 61
62
Be It Enacted by the Legislature of the State of Florida: 63
64
Section 1. Paragraphs (a), (c), (e), and (g) of subsection 65
(1), subsections (2) and (4), paragraph (b) of subsection (5), 66
and subsection (7) of section 119.0725, Florida Statutes, are 67
amended, and new paragraphs (g) and (i) are added to subsection 68
(1) of that section, to read: 69
119.0725 Agency cybersecurity information; public records 70
exemption; public meetings exemption.— 71
(1) As used in this section, the term: 72
(a) "Breach" means unauthorized access of data or 73
information in electronic form containing personal information. 74
Good faith access of data or information personal information by 75

HB 7023 2026

CODING: Words stricken are deletions; words underlined are additions.
hb7023-00
Page 4 of 24
F L O R I D A H O U S E O F R E P R E S E N T A T I V E S

an employee or agent of an agency does not constitute a breach, 76
provided that the data or information is not used for a purpose 77
unrelated to the business or subject to further unauthorized 78
use. 79
(c) "Cybersecurity" means the protection afforded to 80
information technology or operational technology in order to 81
attain the applicable obj