(1) The requirements imposed on controllers and processors under this part may not restrict a controller‘s or processor‘s ability to collect, use, or retain data to do any of the following:

(a) Conduct internal research to develop, improve, or repair products, services, or technology.

Terms Used In Florida Statutes 501.717

  • Consumer: means an individual who is a resident of or is domiciled in this state acting only in an individual or household context. See Florida Statutes 501.702
  • Contract: A legal written agreement that becomes binding when signed.
  • Controller: means :
    (a) A sole proprietorship, partnership, limited liability company, corporation, association, or legal entity that meets the following requirements:
    1. See Florida Statutes 501.702
  • processing: means an operation or set of operations performed, whether by manual or automated means, on personal data or on sets of personal data, such as the collection, use, storage, disclosure, analysis, deletion, or modification of personal data. See Florida Statutes 501.702
  • Processor: means a person who processes personal data on behalf of a controller. See Florida Statutes 501.702
(b) Effect a product recall.
(c) Identify and repair technical errors that impair existing or intended functionality.
(d) Perform internal operations that are:

1. Reasonably aligned with the expectations of the consumer;
2. Reasonably anticipated based on the consumer’s existing relationship with the controller; or
3. Otherwise compatible with processing data in furtherance of the provision of a product or service specifically requested by a consumer or the performance of a contract to which the consumer is a party.
(2) A requirement imposed on a controller or processor under this part does not apply if compliance with the requirement by the controller or processor, as applicable, would violate an evidentiary privilege under the laws of this state.
  Previous section
Next section  
 Part V Contents