The Florida AI regulation now leading the country is not one law. It is a lawsuit, a bill that died, a proposal for next year, and a set of duties that already apply to your business.
What this covers:
What the Florida AI Regulation Actually Requires Today
Start with the part most coverage skips: Florida has not passed a comprehensive AI law.
The Artificial Intelligence Bill of Rights, SB 482, was a priority of Governor Ron DeSantis and sponsored by Sen. Tom Leek.
It cleared the Florida Senate 35-2 on March 4, 2026. The House never took it up, and per the official bill history it died in messages on March 13, 2026.
So the Florida AI regulation you can be cited under today is a patchwork, and knowing which piece reaches you is the whole game.
Piece one: the Florida Digital Bill of Rights, the 2023 privacy law. It reaches only very large companies, meaning $1 billion in global gross revenue plus at least one consumer-volume test.
Piece two: the Florida Information Protection Act. This one reaches ordinary businesses. You get 30 days to notify affected individuals after a breach, and the Attorney General must be told when more than 500 Florida residents are involved.
Piece three: the under-14 social media ban, the firmest end of the Florida AI regulation. The Attorney General’s office says the Eleventh Circuit “just upheld that law” in October 2026.
Piece four: sector rules. The State Board of Education adopted classroom AI limits in September, including a bar on AI that simulates companionship and on selling student data to train models.
Who Is Driving the Florida AI Regulation Push
Two Republicans set the direction: DeSantis on policy and Attorney General James Uthmeier on enforcement.
On October 22, 2026, Uthmeier proposed the Safe Screens Act. It is the most detailed AI-and-minors framework any state attorney general has put on paper.
For app stores it means age determination and parental consent before a minor downloads or buys an app.
For social accounts aged 14 to 17 the proposed Florida AI regulation means quiet mode from 11 p.m. to 7 a.m. year-round plus school hours, hidden like counts, disabled cosmetic filters, two hours a day, and autoplay off by default.
For AI chatbots the proposed bar covers features that simulate companionship, encourage self-harm, generate sexual content, claim the bot is human, or put engagement ahead of safety.
Violations would be unfair practices under section 501.1736, Florida Statutes, at up to $50,000 each, with a public incident tracker.
None of that is law yet. It is a proposal for the next session, and that distinction matters when you are budgeting for 2027.
Enforcement is already moving faster than legislation. Uthmeier stood up a unit aimed at data flowing to foreign adversaries, and per IAPP its first subpoena went to the retailer Shein.
His office has also sued Discord, sought limits on minors’ access to Meta’s platforms, and won the social media ruling. That is the practical shape of the Florida AI regulation: agency action, not a statute.
It also puts Florida at odds with Washington. A December 2025 executive order created a Justice Department task force to challenge state AI laws, and the Florida House speaker has said AI belongs at the federal level.
The OpenAI Case Is the Sharpest Edge of Florida AI Regulation
Florida sued OpenAI and Sam Altman on June 1, 2026 — the first state-led suit against the company over harms to young users.
The claims run under the Deceptive and Unfair Trade Practices Act, plus negligence, design defect, failure to warn, fraudulent misrepresentation and public nuisance.
On September 28 the state filed a 49-page motion for a temporary injunction in Highlands County Circuit Court.
It asks the court to block OpenAI from developing new models without independent third-party safety approval, ban ChatGPT for minors in Florida, and restrict collection of under-13 data without parental consent.
It also asks that OpenAI stop describing ChatGPT as safe, reliable or accurate without warnings, stop human-like framing, and stop “conversation prolongation”.
Uthmeier’s summary was blunt: “Stop calling it safe. Stop pretending it’s human. Stop selling it to kids.”
The motion leans on OpenAI’s own disclosures, including models reaching systems they were not meant to reach, and notes that the defendants have publicly called for caution. “It is a rare request for an injunction where the Defendants themselves have publicly endorsed it.”
OpenAI says it paused training on its most capable models and wants statewide rules that cover the whole industry rather than one company.
No judge has granted any of it. These are allegations and requested remedies, not orders, and the case is still moving.
What it has already done is set a template: on October 14, 2026, attorneys general in Arizona, Arkansas and West Virginia filed their own OpenAI complaints built on similar theories. That is the leader effect behind the Florida AI regulation headline.
5 Duties the Florida AI Regulation Puts on Your Business
The Florida AI regulation breaks into five concrete obligations. None of them require you to wait for a new statute.
1. Work out which rule actually reaches you. Most South Florida businesses are outside the Digital Bill of Rights’ $1 billion threshold and squarely inside the Information Protection Act. Assuming you are exempt from all of it is the expensive mistake.
2. Rehearse the 30-day clock before you need it. Breach notice under the Information Protection Act is a deadline that assumes you already know what was taken. Most organizations burn two of those 30 days just establishing scope.
3. Audit what your chatbot says about itself. If you deploy a customer-facing assistant, check the disclosure, the retention language and any framing that implies a person is answering. The Attorney General’s proposed ban list is the likely standard.
4. Treat minors’ data as your highest-risk category. Parental consent, no sale for model training, no companion-style interaction. That is the direction of every piece of the Florida AI regulation, enacted or proposed.
5. Put AI vendor terms in writing. Who owns the prompts, whether your data trains their model, how long it is retained, who the subprocessors are, and how fast they must tell you about an incident. Ask now, not during discovery.
Two reference points for the last one: the classroom AI rules Florida adopted in September show how quickly these rules became mandatory in one sector, and what a health-sector breach notification actually looks like shows what the 30-day clock looks like when a vendor is involved.
the AI-driven attack side of the same problem is worth reading next, because the same AI capability driving the regulatory push is what attackers are now using.
Florida AI Regulation FAQ
Is there a Florida AI law in force? Not a comprehensive one. The Artificial Intelligence Bill of Rights passed the Senate 35-2 but died in the House on March 13, 2026. What applies today is the Digital Bill of Rights, the Information Protection Act, the under-14 social media ban and sector rules.
Does the Digital Bill of Rights apply to a small business? Generally no. It covers companies with $1 billion or more in global revenue plus a consumer-volume test.
What is the breach deadline under Florida law? 30 days to notify affected individuals, with notice to the Attorney General when more than 500 Florida residents are affected.
Has the OpenAI injunction been granted? No. The motion was filed September 28, 2026 and no ruling has been issued.
Is the Safe Screens Act law? No. It was proposed October 22, 2026 and would need to pass the next legislative session. The Florida AI regulation may be enforced by the Attorney General, but it is not on the books.
Sources: Florida Senate SB 482 bill history; Attorney General release on the Safe Screens Act (10/22/2026); Politico and CBS12 on the injunction motion; IAPP on the foreign-adversary privacy unit.
Not sure which Florida privacy duties already apply to you? Contact Nextek IT to book a call and we will map your obligations, your breach clock and your AI vendor terms in one pass.