Florida SB 7024: Employer Contributions to Fund Retiree Benefits

Bill Text

7024 
OGSR/Cybersecurity, Information Technology, and Operational Technology Information 
2026-03-18T06:09:52Z 
Providing an exemption from public records requirements for the cybersecurity, information technology, and operational technology information held by an agency; providing an exemption from public meetings requirements for any portion of a meeting that would reveal such information; providing for future legislative review and repeal of the exemptions; providing a statement of public necessity, etc. 
ENROLLED 
2026 
S 
2026-06-10T00:00:00Z 
GB 
General Bill 
er 

 ENROLLED 
 2026 Legislature SB 7024, 1st Engrossed 

 20267024er 
 1 
 2 An act relating to a review under the Open Government 
 3 Sunset Review Act; amending s. 119.0725, F.S.; 
 4 revising definitions and defining terms; providing an 
 5 exemption from public records requirements for the 
 6 cybersecurity, information technology, and operational 
 7 technology information held by an agency; providing an 
 8 exemption from public meetings requirements for any 
 9 portion of a meeting that would reveal such 
 10 information; providing for retroactive application of 
 11 the exemptions; providing for future legislative 
 12 review and repeal of the exemptions; amending ss. 
 13 15.16, 24.1051, 101.5607, 106.0706, 112.31446, 119.07, 
 14 119.071, 119.0712, 119.0713, 119.0714, and 282.318, 
 15 F.S.; conforming cross-references and provisions to 
 16 changes made by the act; repealing s. 627.352, F.S., 
 17 relating to security of data and information 
 18 technology in the Citizens Property Insurance 
 19 Corporation; repealing s. 1004.055, F.S., relating to 
 20 security of data and information technology in state 
 21 postsecondary education institutions; providing a 
 22 statement of public necessity; providing an effective 
 23 date. 
 24 
 25 Be It Enacted by the Legislature of the State of Florida: 
 26 
 27 Section 1. Section 119.0725, Florida Statutes, is amended 
 28 to read: 
 29 119.0725 Agency cybersecurity information; public records 
 30 exemption; public meetings exemption.— 
 31 (1) As used in this section, the term: 
 32 (a) “Breach” means unauthorized access of data or in 
 33 electronic form containing personal information. Good faith 
 34 access of data or personal information by an employee or agent 
 35 of an agency does not constitute a breach, provided that the 
 36 data or information is not used for a purpose unrelated to the 
 37 business or subject to further unauthorized use. 
 38 (b) “Critical infrastructure” means existing and proposed 
 39 information technology and operational technology systems and 
 40 assets, whether physical or virtual, the incapacity or 
 41 destruction of which would negatively affect security, economic 
 42 security, public health, or public safety. 
 43 (c) “Cybersecurity” means the protection afforded to 
 44 information technology or operational technology in order to 
 45 attain the applicable objectives of preserving the 
 46 confidentiality, integrity, and availability of such 
 47 technologies, data, and information has the same meaning as in 
 48 s. 282.0041. 
 49 (d) “Data” has the same meaning as in s. 282.0041. 
 50 (e) “Incident” means a violation or imminent threat of 
 51 violation, whether such violation is accidental or deliberate, 
 52 of an agency’s cybersecurity, information technology, or 
 53 operational technology resources, security, policies, or 
 54 practices. As used in this paragraph, the term “imminent threat 
 55 of violation” means a situation in which the agency has a 
 56 factual basis for believing that a specific incident is about to 
 57 occur. 
 58 (f) “Information technology” has the same meaning as in s. 
 59 282.0041. 
 60 (g) “Login credentials” means information used to 
 61 authenticate a user’s identity or otherwise authorize access 
 62 when logging into a computer, computer system, computer network, 
 63 electronic device, or online user account accessible over the 
 64 Internet through a mobile device, a website, or any other 
 65 electronic means, or for authentication or password or account 
 66 recovery. 
 67 (h) “Operational technology” means the hardware and 
 68 software that cause or detect a change through the direct 
 69 monitoring or control of physical devices, systems, processes, 
 70 or events. 
 71 (i) “Public-facing portal” means a web portal or computer 
 72 application accessible by the public over the Internet, whether 
 73 through a mobile device, website, or other electronic means. 
 74 (2) The following information held by an agency is 
 75 confidential and exempt from s. 119.07(1) and s. 24(a), Art. I 
 76 of the State Constitution: 
 77 (a) Coverage limits and deductible or self-insurance 
 78 amounts of insurance or other risk mitigation coverages acquired 
 79 for the protection of information technology systems, 
 80 operational technology systems, or data of an agency. 
 81 (b) Information relating to critical inf