Camera-related state law

The governing statute is the Florida Security of Communications Act, codified at Fla. Stat. Chapter 934 with the central interception prohibition at Fla. Stat. 934.03. The Act prohibits intentional interception of any wire, oral, or electronic communication without the consent of all parties to the communication. An oral communication under the Act is one uttered with a justifiable expectation of privacy, which the Florida Supreme Court has interpreted to require all-party consent in most everyday commercial scenarios. Florida is therefore a two-party (all-party) consent state for audio.

Video-only surveillance is treated more permissively. Recording video in places where a person has no justifiable expectation of privacy is generally lawful, with two practical caveats. First, posted notice is the industry standard for any commercial property and many leases require it. Second, hidden cameras in places where privacy is expected (restrooms, locker rooms, dressing rooms, hotel guest rooms) trigger separate criminal exposure under Fla. Stat. 810.145, the Florida video voyeurism statute.

Practical translation. Commercial FL camera installs default to video-only on the cameras and route audio capture through a documented all-party consent workflow when audio is needed. Most multi-site retailers and hospitality operators in FL keep audio off the cameras entirely.

Biometric data law

Florida does not have a standalone biometric privacy statute with a private right of action like Illinois BIPA. Coverage runs through several layered statutes:

  • Florida Information Protection Act (FIPA, Fla. Stat. 501.171). Requires covered entities to implement reasonable measures to protect personal information and to notify affected individuals after a breach. Personal information includes biometric records when combined with other identifiers.
  • Florida Digital Bill of Rights (Fla. Stat. 501.71 et seq.). Enacted in 2023, adds consumer privacy rights at covered controllers above defined thresholds. Reaches sensitive personal information including biometric data.
  • Fla. Stat. 817.568. Makes criminal misuse of another person's personal identification information, including biometric data, a felony.

Bills modeled in part on the BIPA framework have been introduced in recent FL legislative sessions and remain in process. Operators using fingerprint or facial recognition in FL document consent, retention, and access controls under FIPA, the Digital Bill of Rights, and FTC Safeguards Rule (16 CFR Part 314) where applicable.

Privacy in the workplace

Florida does not have a statute as specific as New York Civil Rights Law 52-c that requires written employee notice before electronic monitoring. The general rule is that employers can monitor common work areas with posted notice and cannot record oral communications without all-party consent under Fla. Stat. 934.03. Cameras in restrooms, locker rooms, and any other space where privacy is expected trigger Fla. Stat. 810.145 video voyeurism exposure regardless of whether the subject is an employee or a customer.

Most FL employers issue a single workplace surveillance notice in the handbook covering cameras, computer monitoring, and call recording, and obtain written acknowledgment at hire. The acknowledgment is the practical mechanism that documents the all-party consent posture for any audio capture in the workplace.

Cameras in production lines, retail floor, loading dock, and warehouse aisles are routine when paired with notice. Cameras in employee-only spaces with a justifiable expectation of privacy (changing areas, lactation rooms, employee restrooms) are off-limits.

Public-place and common-area cameras

For commercial real estate, multi-tenant residential, retail, hospitality, and the FL tourism economy generally, the practical rule set is consistent. Cameras in lobbies, hallways, exterior, parking, retail floor, pool decks, and other non-private common areas are lawful with posted notice. Cameras in bathrooms, dressing rooms, hotel guest rooms, and any other space where privacy is expected are off-limits.

FL hospitality operators handle guest-room signage at the door and at the front desk and document any guest-area camera coverage in the property security plan. Multi-tenant residential operators handle FIPA disclosures in the lease for any biometric access control. Audio in any common area is the high-risk variable: even in non-private spaces, ambient audio capture can sweep up oral communications and pull the install into Fla. Stat. 934.03 territory.

Video retention requirements

Florida has no single statewide video retention statute that applies to all commercial cameras. Retention is set by the regime that governs the industry.

  • Medical marijuana. The Office of Medical Marijuana Use (OMMU) under the Florida Department of Health publishes camera coverage and retention rules for licensed Medical Marijuana Treatment Centers (MMTCs). Pull the current OMMU rules before designing the install.
  • Healthcare. HIPAA Security Rule (45 CFR Part 164) governs PHI-touching footage. Retention is typically 30 to 90 days at the facility, longer when an investigation is open.
  • Retail and hospitality with card data. PCI-DSS Requirement 9 specifies camera coverage of the cardholder data environment with 90-day retention.
  • Banks and financial institutions. Federal banking regulators set surveillance and retention expectations through bank examination. Florida Office of Financial Regulation supervises state-chartered institutions.
  • Schools. FERPA reach for K-12 districts and higher education. Florida statutes including the Marjory Stoneman Douglas High School Public Safety Act add school-safety expectations.
  • Federal contractors and grantees. NDAA Section 889 controls vendor selection. Retention is contractor-driven through the SSP or grant award terms.

Default retention for FL commercial systems with no specific industry rule is 30 days. Operators in higher-risk industries set longer retention with explicit written retention policies in the WISP, facility security plan, or OMMU SOP.

Notable enforcement examples

Florida enforcement against businesses for camera and privacy issues runs through several channels. The Florida Attorney General has brought FIPA enforcement actions and consumer protection cases against businesses with documented data security and privacy failures. Florida State Attorneys have prosecuted Fla. Stat. 934.03 audio interception cases and Fla. Stat. 810.145 video voyeurism cases involving cameras placed in private spaces. The Florida Department of Health has issued sanctions against MMTC licensees for surveillance and retention failures.

Federal HIPAA settlements have reached FL-based defendants where physical safeguards (facility access control, camera coverage of PHI areas) were a documented part of the breach. PCI assessor findings have triggered card brand penalties at FL retailers where camera coverage of the cardholder data environment was inadequate or retention was below 90 days. Real settlements are published on the FL AG, FL DOH, and HHS OCR enforcement pages.

What Tec-Tel does to comply with Florida regulations

Tec-Tel installs across Florida for retail, manufacturing, healthcare, multi-tenant residential, hospitality, and licensed medical marijuana customers. The default install pattern for a FL commercial site:

  • Video-only on cameras unless audio is documented with all-party consent under Fla. Stat. 934.03.
  • Posted surveillance notice at every public entrance.
  • No cameras in restrooms, locker rooms, dressing rooms, hotel guest rooms, or any space where privacy is justifiably expected under Fla. Stat. 810.145.
  • FIPA and Florida Digital Bill of Rights notice and retention language coordinated with the customer's privacy team for any biometric capture.
  • Retention configured to the regime that governs the industry (HIPAA, PCI, OMMU, NDAA), with the facility's written retention policy attached.
  • NDAA Section 889-compliant vendor selection on any federal-touching install. No Hikvision, Dahua, Hytera, Huawei, ZTE, or covered OEM relabels.
  • Multi-vendor architecture so the customer is not locked into one camera or VMS line as state and federal rules evolve.

This is a buyer-facing reference, not legal advice. For a specific FL regulatory question, work with your privacy counsel.

Security service in Florida

Tec-Tel deploys AI-era security across Florida with one accountable project manager owning design, install, and service to one standard. The cities below have local service detail, deal sizing, and a free consultation. Don't see yours? We cover the whole state.

Or browse the full city directory and nationwide coverage map.