As attorneys we understand the concept of trust, whether it is appropriately maintaining clients’ funds in a trust account or being a trusted competent advisor for our clients. The same concept applies to the information that we hold about and for our clients. The terms to describe this can be data privacy, information privacy, or many other buzzwords.

However, the underlying theme is that clients entrusted us with their information, and we need to safeguard it. While this certainly is a professional obligation, it is increasingly becoming a legal requirement as well. There is an ever-increasing number of state and federal laws addressing different aspects of data privacy.

The Florida Bar’s Standing Committee on Technology drafted this outline of select laws as a primer in the area and launching point for further understanding. This outline includes some laws that regulate the privacy and security of information that attorneys and their clients handle. The companion Quick Start Guide to Data Privacy Laws was developed to answer basic questions on the application of privacy laws to the practice of law, such as what is privacy, who needs to think about privacy issues, and where to start learning more.

The Florida Bar takes no position on whether these guides are complete or accurate. A lawyer should seek legal advice for any questions or concerns about the application of privacy and security laws. This guide is for familiarization with select laws and is not intended as legal advice.

I. Selected Federal Privacy Laws

1. Health Insurance Portability and Accountability Act (HIPAA) 
2. Employment Retirement Income Security Act (ERISA) 
3. Gramm-Leach-Bliley Act (GLBA) 
4. Children’s Online Privacy Protection Act (COPPA) 
5. Telephone Consumer Protection Act (TCPA) 
6. Employee Polygraph Protection Act (EPPA) 
7. Federal Trade Commission Act 
8. FTC Identity Theft Rule 
9. Federal Information Security Modernization Act 
10. Stored Communications Act 
11. Computer Fraud and Abuse Act 
12. Family Educational Rights and Privacy Act (FERPA) 
13. Driver’s Privacy Protection Act (DPPA) 

II. Selected State Privacy Laws:

1. Florida Information Protection Act 
2. Computer Abuse and Data Recovery Act 
3. Student and Parental Rights and Educational Choices statute 

III. Privacy in Florida Rules of Procedure:

1. Florida Rule of Judicial Administration 2.425: Minimization of the Filing of Sensitive Information 

VIEWS AND CONCLUSIONS EXPRESSED IN ARTICLES HEREIN ARE THOSE OF THE AUTHORS AND NOT NECESSARILY THOSE OF FLORIDA BAR STAFF, OFFICIALS, OR BOARD OF GOVERNORS OF THE FLORIDA BAR.