This docum ent does not reflect the intent or official position of the bill sponsor or House of Representatives. STORAGE NAME: h1461d.JDC DATE: 2/19/2024 HOUSE OF REPRESENTATIVES STAFF ANALYSIS BILL #: CS/HB 1461 Pub. Rec./Investigations by the Department of Legal Affairs SPONSOR(S): Commerce Committee, McFarland TIED BILLS: CS/CS/HB 1459 IDEN./SIM. BILLS: SB 1682 REFERENCE ACTION ANALYST STAFF DIRECTOR or BUDGET/POLICY CHIEF 1) Commerce Committee 19 Y, 0 N, As CS Wright Hamon 2) State Affairs Committee 19 Y, 0 N Skinner Williamson 3) Judiciary Committee Leshko Kramer SUMMARY ANALYSIS CS/CS/HB 1459 (2024), to which this bill is linked creates s. 501.174, F.S., to: Require certain entities and persons that produce or offer artificial intelligence (AI) content to the Florida public to: o Create certain safety and transparency standards; and o Make certain disclosures. Prohibit any entity or person from knowingly producing, generating, incorporating, or synthesizing child pornography through AI. Authorize the Department of Legal Affairs (DLA), upon belief that any entity or person is in violation of the AI transparency requirements of CS/CS/HB 1459, to bring an action under the Florida Deceptive and Unfair Trade Practices Act. CS/HB 1461 amends s. 501.174, F.S., to make confidential and exempt from public record requirements all information held by DLA pursuant to a notification of a violation of the AI transparency requirements or an investigation of such a violation until such time as the investigation is complete or ceases to be active. The bill provides that such confidential and exempt information may be released by DLA during an active investigation only in the furtherance of its official duties and responsibilities; for print, publication, or broadcast in certain instances; or to another governmental entity in the furtherance of the receiving entity’s official duties and responsibilities. Under the bill, once an investigation is completed or ceases to be active, the following information held by DLA remains confidential and exempt: • Information that is otherwise confidential or exempt; • Personal identifying information; • A computer forensic report; • Information that would otherwise reveal weaknesses in the data security of an entity or person; and • Information that would disclose proprietary information of an entity or person. The bill provides that the newly-created public record exemption is subject to the Open Government Sunset Review Act and will repeal on October 2, 2029, unless reviewed and saved from repeal through reenactment by the Legislature. The bill includes a statement of public necessity as required by the Florida Constitution. The bill provides an effective date of the same date that CS/CS/HB 1459 or similar legislation takes effect, if such legislation is adopted in the same legislative session, or an extension thereof, and becomes a law. Article I, s. 24(c) of the Florida Constitution requires a two-thirds vote of the members present and voting for final passage of a newly-created or expanded public record exemption. The bill creates a public record exemption; thus, it requires a two-thirds vote for final passage. FULL ANALYSIS STORAGE NAME: h1461d.JDC PAGE: 2 DATE: 2/19/2024 I. SUBSTANTIVE ANALYSIS A. EFFECT OF PROPOSED CHANGES: Present Situation Public Records Article I, section 24(a) of the Florida Constitution sets forth the state’s public policy regarding access to government records, guaranteeing every person a right to inspect or copy any public record of the legislative, executive, and judicial branches of government. The Legislature, however, may provide by general law an exemption 1 from public record requirements provided the exemption passes by a two- thirds vote of each chamber, states with specificity the public necessity justifying the exemption, and is no broader than necessary to meet its public purpose. 2 Section 119.01, F.S., also addresses the public policy regarding access to government records by guaranteeing every person a right to inspect and copy any state, county, or municipal record, unless the record is exempt. Furthermore, the Open Government Sunset Review (OGSR) Act 3 provides that a public record exemption may be created, revised, or maintained only if it serves an identifiable public purpose and the “Legislature finds that the purpose is sufficiently compelling to override the strong public policy of open government and cannot be accomplished without the exemption.” 4 An identifiable public purpose is served if the exemption meets one of the following purposes: Allows the state or its political subdivisions to effectively and efficiently administer a governmental program, which administration would be significantly impaired without the exemption; Protects sensitive personal information that, if released, would be defamatory or would jeopardize an individual’s safety; however, only the identity of an individual may be exempted under this provision; or Protects trade or business secrets. 5 Pursuant to the OGSR Act, a new public record exemption, or the substantial amendment of an existing public record exemption, is repealed on October 2nd of the fifth year following enactment, unless reviewed and saved from repeal through reenactment by the Legislature. 6 Furthermore, there is a difference between records the Legislature designates exempt from public record requirements and those the Legislature designates confidential and exempt. A record classified as exempt from public disclosure may be disclosed under certain circumstances. If the Legislature designates a record as confidential and exempt from public disclosure, such record may not be released by the custodian of public records to anyone other than the persons or entities specifically designated in statute. 7 Active Criminal Intelligence and Criminal Investigative Information Exemption Section 119.071, F.S., exempts active criminal intelligence information and active criminal investigative information from public record requirements. 8 Additionally, a law enforcement agency’s request to inspect or copy a public record that is in another agency’s custody and the custodian’s response to the 1 A “public record exemption” means a provision of general law which provides that a specified record, or portion thereof, is not subject to the access requirements of s. 119.07(1), F.S., or s. 24, Art. I of the Florida Constitution. See s. 119.011(8), F.S. 2 Art. I, s. 24(c), Fla. Const. 3 S. 119.15, F.S. 4 S. 119.15(6)(b), F.S. 5 Id. 6 S. 119.15(3), F.S. 7 See WFTV, Inc. v. Sch. Bd. of Seminole, 874 So.2d 48, 53 (Fla. 5th DCA 2004), review denied, 892 So.2d 1015 (Fla. 2004); State v. Wooten, 260 So. 3d 1060, 1070 (Fla. 4th DCA 2018); City of Rivera Beach v. Barfield, 642 So.2d 1135 (Fla. 4th DCA 1994); Williams v. City of Minneola, 575 So.2d 683, 687 (Fla. 5th DCA 1991); See Op. Att’y Gen. Fla. 04- 09 (2004). 8 S. 119.071(2)(c), F.S. STORAGE NAME: h1461d.JDC PAGE: 3 DATE: 2/19/2024 request, and any information that would identify whether a law enforcement agency has requested or received that public record are exempt from public record requirements during the period the information constitutes active criminal intelligence information or active criminal investigative information. 9 “Criminal intelligence information” means information with respect to an identifiable person or group of persons collected by a criminal justice agency 10 in an effort to anticipate, prevent, or monitor possible criminal activity. 11 “Criminal investigative information” means information with respect to an identifiable person or group of persons compiled by a criminal justice agency in the course of conducting a criminal investigation of a specific act or omission, including, but not limited to, information derived from laboratory tests, reports of investigators or informants, or any type of surveillance. 12 Criminal investigative information does not include documents given to the person arrested, except that a court in a criminal case may order that the information given to the person arrested be maintained in a confidential manner and be exempt from public records requirements until released at trial if it is found that the release of such information would be defamatory to the good name of a victim or witness or would jeopardize the safety of such victim or witness. 13 Criminal intelligence and investigative information is considered “active” as long as it is related to intelligence gathering conducted with a reasonable, good faith belief that it will lead to detection of ongoing or reasonably anticipated crimes; or is related to an ongoing investigation which is continuing with a reasonable, good faith anticipation of securing an arrest or prosecution in the foreseeable future, respectively. 14 Artificial Intelligence The term “artificial intelligence” (AI) was coined at the Dartmouth Summer Research Project on Artificial Intelligence, a conference held in 1956. Since 2010, there has been a lot of advancement in AI research, which has been attributed to the “availability of large datasets (i.e., big data), improved [machine learning] 15 approaches and algorithms, and more powerful computers.” 16 AI encompasses a large field of existing and emerging technologies, methodologies, and application areas. AI is “generally thought of as computerized systems that work and react in ways commonly thought to require intelligence.” 17 The application of AI extends to areas such as “natural language processing, facial recognition, and robotics.” 18 9 S. 119.071(2)(c)2.a., F.S. 10 “Criminal justice agency” means: 1) any law enforcement agency, court, or prosecutor; 2) any other agency charged by law with criminal law enforcement duties; 3) any agency having custody of criminal intelligence information or criminal investigative information for the purpose of assisting law enforcement agencies in the conduct of active criminal investigation or prosecution or for the purpose of litigating civil actions under the Racketeer Influenced and Corrupt Organization Act, during the time that such agencies are in possession of criminal intelligence information or criminal investigative information pursuant to their criminal law enforcement duties; and 4) the Department of Corrections. S. 119.011(4), F.S. 11 S. 119.011(3)(a), F.S. 12 S. 119.011(3)(b), F.S. 13 S. 119.011(3)(c)5., F.S. 14 S. 119.011(3)(d), F.S. 15 Machine learning (ML) examines how to build computer programs that improve their performance automatically for a task, through experience, without relying on explicit rules-based programing. Congressional Research Service, Artificial Intelligence: Overview, Recent Advances, and Considerations for the 118th Congress, https://crsreports.congress.gov/product/pdf/R/R47644 (last visited Feb. 16, 2024). 16 Id. 17 Id. 18 Id. STORAGE NAME: h1461d.JDC PAGE: 4 DATE: 2/19/2024 Department of Legal Affairs The Department of Legal Affairs (DLA) provides a wide variety of legal services, including defending the state in civil litigation cases; representing the people of Florida in criminal appeals in state and federal courts; protecting the rights of children, consumers, and victims through its various protection programs; and investigating and litigating against businesses that seek to limit competition and defraud taxpayers. 19 CS/CS/HB 1459 (2024) CS/CS/HB 1459 creates s. 501.174, F.S., to: Require an entity or person who produces or offers for use or interaction AI content or technology for a commercial purpose, and makes such content or technology available to the Florida public, to create safety and transparency standards that: o Alert consumers that such content or technology is generated by AI. o Allow such content or technology to be recognizable as generated by AI to other AI. Require an entity or a person to provide a clear and conspicuous notice on its Internet homepage or landing page if it provides an AI mechanism to communicate or interact with Florida consumers for a commercial purpose. Prohibit any entity or person from knowingly producing, generating, incorporating, or synthesizing child pornography through AI. Require any state agency that uses AI to disclose if a person is interacting with AI when interacting with the agency and ensure that any confidential information accessible to an AI system remains confidential. Under the bill, any violation of the AI transparency requirements by a person or entity is considered an unfair and deceptive trade practice actionable under the Florida Deceptive and Unfair Trade Practices Act 20 solely by DLA. The bill does not establish a private cause of action. Effect of Proposed Changes CS/HB 1461 amends s. 501.174, F.S., to make confidential and exempt from public record requirements all information held by DLA pursuant to a notification of a violation of AI transparency requirements or an investigation of such a violation until the investigation is completed or is no longer active. The bill requires the public record exemption to be construed in conformity with s. 119.071(2)(c), F.S., relating to active criminal intelligence information and active criminal investigative information. During an active investigation, the confidential and exempt information may be disclosed by DLA only: In the furtherance of its official duties and responsibilities. For print, publication, or broadcast if DLA determines that such release would assist in notifying the public or locating or identifying a person DLA believes to be a victim of an improper use or disposal of customer records, except that information which remains confidential and exempt after an investigation may not be released in this manner. To another governmental entity in the furtherance of the receiving entity’s official duties and responsibilities. Once an investigation is completed or ceases to be active, the following information held by DLA remains confidential and exempt: 19 Office of Program Policy Analysis and Government Accountability, Office of the Attorney General (Department of Legal Affairs), https://oppaga.fl.gov/ProgramSummary/ProgramDetail?programNumber=1026 (last visited Feb. 16, 2024); see also ch. 16 and s. 20.11, F.S. 20 Part II of ch. 501, F.S., is known as the “Florida Deceptive and Unfair Trade Practices Act.” S. 501.201, F.S. The Florida Deceptive and Unfair Trade Practices Act is a consumer and business protection measure that prohibits unfair methods of competition, unconscionable, deceptive, or unfair acts or practices in the conduct of trade or commerce. S. 501.202, F.S. STORAGE NAME: h1461d.JDC PAGE: 5 DATE: 2/19/2024 Information that is otherwise confidential or exempt from s. 119.071(1) and s. 24(a), Art. I, of the Florida Constitution. Personal identifying information. A computer forensic report. Information that would otherwise reveal weaknesses in an entity or person’s data security. Information that would disclose an entity or person’s proprietary information. 21 The bill provides that the public record exemption is subject to the OGSR Act and will repeal on October 2, 2029, unless reviewed and saved from repeal through reenactment by the Legislature. The bill provides an effective date of the same date that CS/CS/HB 1459 or similar legislation takes effect, if such legislation is adopted in the same legislative session, or an extension thereof, and becomes a law. B. SECTION DIRECTORY: Section 1: Amends s. 501.174, F.S., relating to artificial intelligence transparency. Section 2: Provides a public necessity statement. Section 3: Provides an effective date contingent on the passage of CS/CS/HB 1459 or other similar legislation. II. FISCAL ANALYSIS & ECONOMIC IMPACT STATEMENT A. FISCAL IMPACT ON STATE GOVERNMENT: 1. Revenues: None. 2. Expenditures: The bill may have a minimal fiscal impact on DLA because agency staff responsible for complying with public record requests may require training related to the creation of the public record exemption. DLA could incur costs associated with redacting the confidential and exempt information prior to releasing a record. The costs, however, would be absorbed by existing resources, as they are part of the day-to-day responsibilities of agencies. B. FISCAL IMPACT ON LOCAL GOVERNMENTS: 1. Revenues: None. 2. Expenditures: None. C. DIRECT ECONOMIC IMPACT ON PRIVATE SECTOR: None. D. FISCAL COMMENTS: None. 21 The bill defines the term “proprietary information” to mean information that is owned or controlled by the entity or person; is intended to be private and is treated by the entity or person as private because disclosure would harm the entity or person or its business operations; has not been disclosed except as required by law or through a private agreement that provides that the information will not be released to the public; is not publicly available or otherwise readily ascertainable through proper means from another source in the same configuration as received by DLA; and reveals competitive interests. STORAGE NAME: h1461d.JDC PAGE: 6 DATE: 2/19/2024 III. COMMENTS A. CONSTITUTIONAL ISSUES: 1. Applicability of Municipality/County Mandates Provision: Not applicable. The bill does not appear to affect county or municipal governments. 2. Other: Vote Requirement Article I, s. 24(c) of the Florida Constitution requires a two-thirds vote of the members present and voting for final passage of a newly-created or expanded public record or public meeting exemption. The bill creates a public record exemption; thus, it requires a two-thirds vote for final passage. Public Necessity Statement Article I, s. 24(c) of the Florida Constitution requires a public necessity statement for a newly-created or expanded public record or public meeting exemption. The bill creates a public record exemption; thus, it includes a public necessity statement. The public necessity statement provides, in part, that the Legislature finds that the release of information held by DLA pursuant to a notification of a violation of the AI transparency requirements of the bill, or an investigation of such a violation, could: Frustrate or thwart such an investigation and impair the ability of DLA to perform assigned functions; Undo specific statutory exemptions otherwise protecting the information; Be used for the purpose of identity theft; Destroy the value of proprietary information resulting in financial loss to an entity or person; and Result in the identification of cybersecurity vulnerabilities of an entity or person and be used to harm the entity or person. Breadth of Exemption Article I, s. 24(c) of the Florida Constitution requires a newly created or expanded public record or public meeting exemption to be no broader than necessary to accomplish the stated purpose of the law. The bill creates a public record exemption for information relating to alleged violations of the AI transparency requirements of the bill, which does not appear to be broader than necessary to accomplish its purpose. B. RULE-MAKING AUTHORITY: The bill does not require rulemaking, nor does the bill confer or alter DLA’s rulemaking authority. C. DRAFTING ISSUES OR OTHER COMMENTS: None. IV. AMENDMENTS/COMMITTEE SUBSTITUTE CHANGES On January 23, 2024, the Commerce Committee adopted an amendment and reported the bill favorably as a committee substitute. The committee substitute: Clarifies that the public record exemption applies to information held by the Department of Legal Affairs to ensure records received or created by the department relating to its investigations of certain entities and persons is protected. Clarifies that information that is otherwise confidential or exempt remains protected at the conclusion of the investigation. Removes a duplicative public record exemption for trade secrets. Conforms the public necessity statement to the changes made to the public record exemption. STORAGE NAME: h1461d.JDC PAGE: 7 DATE: 2/19/2024 Makes a technical change to conform the bill to changes made in the PCS for HB 1459, to which this bill is linked. This analysis is drafted to the committee substitute as passed by the Commerce Committee.