1. (1) DEPARTMENT OF HEALTH.--All personal identifying information contained in records relating to an individual's personal health or eligibility for health-related services held by the Department of Health are confidential and exempt from s. 119.07(1) and s. 24(a), Art. I of the State Constitution, except as otherwise provided in this subsection. Information made confidential and exempt by this subsection shall be disclosed:

   1. (a) With the express written consent of the individual or the individual's legally authorized representative.
   2. (b) In a medical emergency, but only to the extent necessary to protect the health or life of the individual.
   3. (c) By court order upon a showing of good cause.

   4. (d) To a health research entity, if the entity seeks the records or data pursuant to a research protocol approved by the department, maintains the records or data in accordance with the approved protocol, and enters into a purchase and data-use agreement with the department, the fee provisions of which are consistent with s. 119.07(4). The department may deny a request for records or data if the protocol provides for intrusive follow-back contacts, has not been approved by a human studies institutional review board, does not plan for the destruction of confidential records after the research is concluded, is administratively burdensome, or does not have scientific merit. The agreement must restrict the release of any information that would permit the identification of persons, limit the use of records or data to the approved research protocol, and prohibit any other use of the records or data. Copies of records or data issued pursuant to this paragraph remain the property of the department.

      ¹(2) DEPARTMENT OF HIGHWAY SAFETY AND MOTOR VEHICLES.--Personal information contained in a motor vehicle record that identifies the subject of that record is exempt from s. 119.07(1) and s. 24(a), Art. I of the State Constitution except as provided in this section. Personal information includes, but is not limited to, the subject's social security number, driver identification number, name, address, telephone number, and medical or disability information. For purposes of this subsection, personal information does not include information relating to vehicular crashes, driving violations, and driver's status. For purposes of this subsection, the term "motor vehicle record" means any record that pertains to a motor vehicle operator's permit, motor vehicle title, motor vehicle registration, or identification card issued by the Department of Highway Safety and Motor Vehicles. Personal information contained in motor vehicle records exempted by this subsection shall be released by the department for any of the following uses:

   5. (a) For use in connection with matters of motor vehicle or driver safety and theft; motor vehicle emissions; motor vehicle product alterations, recalls, or advisories; performance monitoring of motor vehicles and dealers by motor vehicle manufacturers; and removal of nonowner records from the original owner records of motor vehicle manufacturers, to carry out the purposes of the Automobile Information Disclosure Act, the Motor Vehicle Information and Cost Saving Act, the National Traffic and Motor Vehicle Safety Act of 1966, the Anti-Car Theft Act of 1992, and the Clean Air Act.
   6. (b) For use by any government agency, including any court or law enforcement agency, in carrying out its functions, or any private person or entity acting on behalf of a federal, state, or local agency in carrying out its functions.
   7. (c) For use in connection with matters of motor vehicle or driver safety and theft; motor vehicle emissions; motor vehicle product alterations, recalls, or advisories; performance monitoring of motor vehicles, motor vehicle parts, and dealers; motor vehicle market research activities, including survey research; and removal of nonowner records from the original owner records of motor vehicle manufacturers.

   8. (d) For use in the normal course of business by a legitimate business or its agents, employees, or contractors, but only:

      1. To verify the accuracy of personal information submitted by the individual to the business or its agents, employees, or contractors; and

      2. If such information as so submitted is not correct or is no longer correct, to obtain the correct information, but only for the purposes of preventing fraud by, pursuing legal remedies against, or recovering on a debt or security interest against, the individual.

   9. (e) For use in connection with any civil, criminal, administrative, or arbitral proceeding in any court or agency or before any self-regulatory body for:

      1. Service of process by any certified process server, special process server, or other person authorized to serve process in this state.

      2. Investigation in anticipation of litigation by an attorney licensed to practice law in this state or the agent of the attorney; however, the information may not be used for mass commercial solicitation of clients for litigation against motor vehicle dealers.

      3. Investigation by any person in connection with any filed proceeding; however, the information may not be used for mass commercial solicitation of clients for litigation against motor vehicle dealers.

      4. Execution or enforcement of judgments and orders.

      5. Compliance with an order of any court.

   10. (f) For use in research activities and for use in producing statistical reports, so long as the personal information is not published, redisclosed, or used to contact individuals.
   11. (g) For use by any insurer or insurance support organization, or by a self-insured entity, or its agents, employees, or contractors, in connection with claims investigation activities, anti-fraud activities, rating, or underwriting.
   12. (h) For use in providing notice to the owners of towed or impounded vehicles.
   13. (i) For use by any licensed private investigative agency or licensed security service for any purpose permitted under this subsection. Personal information obtained based on an exempt driver's record may not be provided to a client who cannot demonstrate a need based on a police report, court order, or business or personal relationship with the subject of the investigation.
   14. (j) For use by an employer or its agent or insurer to obtain or verify information relating to a holder of a commercial driver's license that is required under 49 U.S.C. ss. 31301 et seq.
   15. (k) For use in connection with the operation of private toll transportation facilities.
   16. (l) For bulk distribution for surveys, marketing, or solicitations when the department has obtained the express consent of the person to whom such personal information pertains.
   17. (m) For any use if the requesting person demonstrates that he or she has obtained the written consent of the person who is the subject of the motor vehicle record.
   18. (n) For any other use specifically authorized by state law, if such use is related to the operation of a motor vehicle or public safety.

   19. (o) For any other use if the person to whom the information pertains has given express consent on a form prescribed by the department. Such consent shall remain in effect until it is revoked by the person on a form prescribed by the department. The restrictions on disclosure of personal information provided by this subsection shall not in any way affect the use of organ donation information on individual driver licenses or affect the administration of organ donation initiatives in this state. Personal information exempted from public disclosure according to this subsection may be disclosed by the Department of Highway Safety and Motor Vehicles to an individual, firm, corporation, or similar business entity whose primary business interest is to resell or redisclose the personal information to persons who are authorized to receive such information. Prior to the department's disclosure of personal information, such individual, firm, corporation, or similar business entity must first enter into a contract with the department regarding the care, custody, and control of the personal information to ensure compliance with the federal Driver's Privacy Protection Act of 1994 and applicable state laws. An authorized recipient of personal information contained in a motor vehicle record, except a recipient under paragraph (l), may contract with the Department of Highway Safety and Motor Vehicles to resell or redisclose the information for any use permitted under this section. However, only authorized recipients of personal information under paragraph (l) may resell or redisclose personal information pursuant to paragraph (l). Any authorized recipient who resells or rediscloses personal information shall maintain, for a period of 5 years, records identifying each person or entity that receives the personal information and the permitted purpose for which it will be used. Such records shall be made available for inspection upon request by the department. The department shall adopt rules to carry out the purposes of this subsection and the federal Driver's Privacy Protection Act of 1994, 18 U.S.C. ss. 2721 et seq. Rules adopted by the department shall provide for the payment of applicable fees and, prior to the disclosure of personal information pursuant to this subsection, shall require the meeting of conditions by the requesting person for the purposes of obtaining reasonable assurance concerning the identity of such requesting person, and, to the extent required, assurance that the use will be only as authorized or that the consent of the person who is the subject of the personal information has been obtained. Such conditions may include, but need not be limited to, the making and filing of a written application in such form and containing such information and certification requirements as the department requires.

       ¹Note.--Section 2, ch. 2004-62, provides that "subsection [(2)] of s. [119.0712], Florida Statutes, is subject to the Open Government Sunset Review Act of 1995 in accordance with s. 119.15, Florida Statutes, and shall stand repealed on October 2, 2009, unless reviewed and saved from repeal through reenactment by the Legislature."

       A. Additional exemptions from the application of this section appear in the General Index to the Florida Statutes under the heading "Public Records."

       B. Former s. 119.07(6)(aa), (cc).

History.--s. 1, ch. 97-185; s. 1, ch. 2001-108; ss. 1, 2, ch. 2004-62; s. 7, ch. 2004-335; ss. 32, 33, ch. 2005-251; s. 1, ch. 2006-199.

Note.--