Florida Digital Bill of Rights (FDBR) 2-3.002(4): Rule 2-3.002(4) and (5): technical and physical security practices

A controller must maintain effective technical controls for personal data, including encryption, audit controls that record and examine activity, time synchronisation and safeguards against unauthorised access or modification; and must limit and protect storage on mobile devices and passive storage media, where unencrypted storage of personal data is prohibited.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Fla. Admin. Code 2-3.001 to 2-3.004: Department of Legal Affairs rules – Florida Digital Bill of Rights (FDBR)

2-3.002(2) Rule 2-3.002(2): general data security practices based on the NIST risk management framework
2-3.002(3) Rule 2-3.002(3): administrative security practices
2-3.003(4) Rule 2-3.003(4) and (5): age knowledge and parental verification
2-3.004(1)(a) Rules 2-3.004(1)(a) to (c) and 2-3.001: commercially reasonable authentication of consumers and authorised persons
2-3.004(1)(d) Rule 2-3.004(1)(d) and (e): account holders, fraud detection and appeals by others

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Florida Digital Bill of Rights (FDBR) controls