Florida law that takes effect July 1 toughens the state’s data breach notification statute. The law broadens the term “personal information” to include individuals’ usernames and e-mail addresses. It also shortens the time a breached company or government agency must notify the state attorney general to 30 days, down from 45 days, if the intrusion affects 500 or more Floridians. Healthcare organizations that comply with HIPAA’s breach notification requirements are generally exempt from the Florida law.”]
Source: https://www.careersinfosecurity.com/florida-toughens-breach-notice-law-a-6998