Florida 2025 Regular Session Status: In Committee 4 R cosponsors

HB 1183 — Cybersecurity Incident Liability

Last action — Died in State Affairs Committee

Track this bill free

No card. One bill, free forever — alerts when it moves.

  1. ✓
    Introduced
  2. 2
    In Committee
  3. 3
    Passed House
  4. 4
    Passed Senate
  5. 5
    To Executive
  6. 6
    Enacted

This bill died with 2025 Regular Session. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.

This bill is no longer active — its legislative session has ended, so there is no live prognosis. It would have to be reintroduced in the current session to move again.

Summary

Cybersecurity Incident Liability; Provides county, municipality, other political subdivision of state, covered entity, or third-party agent that complies with certain requirements is not liable in connection with cybersecurity incident; requires covered entities & third-party agents to implement revised frameworks, standards, laws, or regulations within specified time period; provides private cause of action is not established; provides that fact that specified defendant could have obtained liability shield or presumption against liability is not admissible as evidence of negligence, does not constitute negligence per se, & cannot be used as evidence of fault; specifies defendant in certain actions has certain burden of proof.

Bill Text

What changed in the latest version

120 added · 123 removed

120 line(s) added, 123 removed.

→
Previous
Latest
F L O R I D A H O U S E O F R E P R E S E N T A T I V E S CS/CS/HB 1183 2025 A bill to be entitled An act relating to cybersecurity incident liability;
F L O R I D A H O U S E O F R E P R E S E N T A T I V E S CS/HB 1183 2025 A bill to be entitled An act relating to cybersecurity incident liability;
providing that the fact that a specified defendant could have obtained a liability shield or a presumption against liability is not admissible as evidence of negligence, does not constitute negligence per se, and cannot be used as evidence of fault;
providing that certain failures are not evidence of negligence, do not constitute negligence per se, and cannot be used as evidence of fault;
768.401 Limitation on liability for cybersecurity Page 1 of 5 CODING:
768.401 Limitation on liability for cybersecurity incidents.— (1) As used in this section, the term:
Page 1 of 5 CODING:
hb1183-02-c2 F L O R I D A H O U S E O F R E P R E S E N T A T I V E S CS/CS/HB 1183 2025 incidents.— (1) As used in this section, the term:
hb1183-01-c1 F L O R I D A H O U S E O F R E P R E S E N T A T I V E S CS/HB 1183 2025 (a) "Covered entity" means a sole proprietorship, partnership, corporation, trust, estate, cooperative, association, or other commercial entity.
(a) "Covered entity" means a sole proprietorship, partnership, corporation, trust, estate, cooperative, association, or other commercial entity.
The National Institute of Standards and Technology (NIST) Cybersecurity Framework 2.0;
The National Institute of Standards and Technology (NIST) Framework for Improving Critical Infrastructure Cybersecurity;
501.171(1).
hb1183-02-c2 F L O R I D A H O U S E O F R E P R E S E N T A T I V E S CS/CS/HB 1183 2025 501.171(1).
hb1183-01-c1 F L O R I D A H O U S E O F R E P R E S E N T A T I V E S CS/HB 1183 2025 (e) "Third-party agent" means an entity that has been contracted to maintain, store, or process personal information on behalf of a covered entity.
(e) "Third-party agent" means an entity that has been contracted to maintain, store, or process personal information on behalf of a covered entity.
If regulated by the state or Federal Government, or Page 3 of 5 CODING:
If regulated by the state or Federal Government, or both, or if otherwise subject to the requirements of any of the Page 3 of 5 CODING:
hb1183-02-c2 F L O R I D A H O U S E O F R E P R E S E N T A T I V E S CS/CS/HB 1183 2025 both, or if otherwise subject to the requirements of any of the following laws and regulations, a cybersecurity program that substantially complies with the current applicable version of such laws and regulations:
hb1183-01-c1 F L O R I D A H O U S E O F R E P R E S E N T A T I V E S CS/HB 1183 2025 following laws and regulations, a cybersecurity program that substantially complies with the current applicable version of such laws and regulations:
(5) Any covered entity or third-party agent must update its cybersecurity program to incorporate any revisions of Page 4 of 5 CODING:
(5) Any covered entity or third-party agent must update its cybersecurity program to incorporate any revisions of relevant frameworks or standards or of applicable state or Page 4 of 5 CODING:
hb1183-02-c2 F L O R I D A H O U S E O F R E P R E S E N T A T I V E S CS/CS/HB 1183 2025 relevant frameworks or standards or of applicable state or federal laws or regulations within 1 year after the latest publication date stated in any such revisions in order to retain protection from liability.
hb1183-01-c1 F L O R I D A H O U S E O F R E P R E S E N T A T I V E S CS/HB 1183 2025 federal laws or regulations within 1 year after the latest publication date stated in any such revisions in order to retain protection from liability.
(7) If a civil action is filed against a county, municipality, other political subdivision of the state, covered entity, or third-party agent that failed to implement a cybersecurity program in compliance with this section, the fact that such defendant could have obtained a liability shield or presumption against liability upon compliance is not admissible as evidence of negligence, does not constitute negligence per se, and cannot be used as evidence of fault under any other theory of liability.
(7) Failure of a county, municipality, other political subdivision of the state, covered entity, or third-party agent to implement a cybersecurity program in compliance with this section is not evidence of negligence, does not constitute negligence per se, and cannot be used as evidence of fault under any other theory of liability.
The amendments made by this act apply to any putative class action filed before, on, or after the effective date of this act.
The amendments made by this act apply to any suit filed on or after the effective date of this act and to any putative class action not certified on or before the effective date of this act.
hb1183-02-c2
hb1183-01-c1
View plain text versions (3)

Action History

  1. Died in State Affairs Committee

  2. Indefinitely postponed and withdrawn from consideration

  3. Now in State Affairs Committee

  4. Referred to State Affairs Committee

  5. 1st Reading (Committee Substitute 2)

  6. CS Filed

  7. Laid on Table under Rule 7.18(a)

  8. Reported out of Civil Justice & Claims Subcommittee

  9. Favorable with CS by Civil Justice & Claims Subcommittee

  10. Added to Civil Justice & Claims Subcommittee agenda

  11. 1st Reading (Committee Substitute 1)

  12. Now in Civil Justice & Claims Subcommittee

  13. Referred to State Affairs Committee

  14. Referred to Civil Justice & Claims Subcommittee

  15. CS Filed

  16. Laid on Table under Rule 7.18(a)

  17. Reported out of Information Technology Budget & Policy Subcommittee

  18. Favorable with CS by Information Technology Budget & Policy Subcommittee

  19. Added to Information Technology Budget & Policy Subcommittee agenda

  20. Now in Information Technology Budget & Policy Subcommittee

  21. Referred to State Affairs Committee

  22. Referred to Civil Justice & Claims Subcommittee

  23. Referred to Information Technology Budget & Policy Subcommittee

  24. 1st Reading (Original Filed Version)

  25. Filed

Sponsors

Sponsorship breakdown

Export CSV (upgrade) →

3 sponsors · 3 co-sponsors · 158 not signed on · 3 voted No

Sponsors (3)

  • Giallombardo, Mike Republican
  • Information Technology Budget & Policy Subcommittee
  • Civil Justice & Claims Subcommittee

Co-sponsors (3)

Not signed on (158)

158 members have not signed on to this bill.

Show all 158 →

"Not signed on" means a member has not sponsored or co-sponsored this bill — it does not imply opposition. Members flagged Voted No have a recorded No vote on this bill.

Whip count is in markup. Polling the chamber and every recorded vote this session. Only the first open is slow. It’s instant for you after this. Calling the roll · Tallying · Engrossing

Votes

Passed 13 Yea · 1 Nay · 5 Other
Party YeaNayPresentNot Voting
Republican 10003
Democrat 2102
Unaffiliated 1000
Total 13105
% of votes cast 68%5%0%26%
How each member voted (19)
Member Party Vote
Lopez, V. — Yea
Antone, Bruce Hadley Democrat Not Voting
Daniels, Kimberly Democrat Yea
Gottlieb, Michael "Mike" Democrat Nay
Joseph, Dotie Democrat Not Voting
Rayner, Michele K. Democrat Yea
Albert, Jon Republican Yea
Berfield, Kimberly Republican Yea
Blanco, Omar Republican Yea
Borrero, David Republican Yea
Kendall, Kim Republican Yea
Koster, Traci Republican Yea
Nix Jr., Danny Republican Yea
Oliver, Vanessa Republican Yea
Owen, Michael Republican Yea
Plasencia, Susan Republican Not Voting
Stark, Paula A. Republican Not Voting
Tramont, Chase Republican Yea
Weinberger, Meg Republican Not Voting

Official roll call →

Passed 14 Yea · 2 Nay · 2 Other
Party YeaNayPresentNot Voting
Republican 10001
Democrat 2201
Unaffiliated 2000
Total 14202
% of votes cast 78%11%0%11%
How each member voted (18)
Member Party Vote
Temple — Yea
Lopez, V. — Yea
Bracy Davis, LaVon Democrat Nay
Cross, Lindsay Democrat Nay
López, Johanna Democrat Yea
Nixon, Angela "Angie" Democrat Not Voting
Tendrich, Debra Democrat Yea
Basabe, Fabián Republican Yea
Blanco, Omar Republican Yea
Busatta, Demi Republican Yea
Cassel, Hillary Republican Yea
Giallombardo, Mike Republican Yea
Gonzalez Pittman, Karen Republican Not Voting
Grow, J.J. Republican Yea
McFarland, Fiona Republican Yea
Miller, Monique Republican Yea
Snyder, John Republican Yea
Steele, Kevin M. Republican Yea

Official roll call →

Subjects

Cross-referencing the record. Reading this bill against every other bill in the corpus by meaning, not keywords. Only the first open is slow. It’s instant for you after this. Matching · Ranking · Engrossing

Frequently asked questions

What does HB 1183 do?
Cybersecurity Incident Liability; Provides county, municipality, other political subdivision of state, covered entity, or third-party agent that complies with certain requirements is not liable in connection with cybersecurity incident; requires covered entities & third-party agents to implement revised frameworks, standards, laws, or regulations within specified time period; provides private cause of action is not established; provides that fact that specified defendant could have obtained liability shield or presumption against liability is not admissible as evidence of negligence, does not constitute negligence per se, & cannot be used as evidence of fault; specifies defendant in certain actions has certain burden of proof.
Who sponsors HB 1183?
HB 1183 is sponsored by Steele, Kevin M. (Republican), Miller, Monique (Republican), Blanco, Omar (Republican), Giallombardo, Mike (Republican), Information Technology Budget & Policy Subcommittee, and Civil Justice & Claims Subcommittee.
What is the current status of HB 1183?
This bill died with 2025 Regular Session. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.
Where can I track HB 1183?
Track HB 1183 free on One Click Politics — get push/email alerts when it moves.

Make your voice heard on HB 1183

Find the representatives who decide this bill and tell them where you stand — for yourself, or mobilize your whole list in one click with One Click Politics advocacy software.

Stay ahead of HB 1183

Last checked for changes 3 months ago · updated continuously

One Click Politics tracks every bill in Congress and all 50 states.

Track this bill →