You are to provide an initial draft of a Breach Notification Policy that complies with Florida law (i.e., the policy must comply with the Florida Statute that we have been working with).

The policy should be comprehensive and easy to understand and implement. At a minimum, the policy should address:

• when notification is required
• if notification is required to whom does the notification need to be made
• when does it need to be made
• the information required to be in the notice
• how the notification should be made.

Policy substantially complies with Florida law by specifying at least 3 of the following: (1) what is a data breach, (2) what is personal information, and (3) what is data in electronic form.

Policy partially complies with Florida law by addressing the notification requirements of at least four of sections: 501.171(3)-501.171(6).