AI Healthcare Regulations in Florida (2025 Guide)

Florida has no single AI-in-healthcare statute. Compliance is built from overlapping state licensing laws, privacy statutes, and federal frameworks. This page outlines the applicable state and federal requirements.

Quick Answer: Is AI in Healthcare Regulated in Florida?

Yes, but not through a dedicated AI law. Florida regulates AI in clinical settings through a patchwork of existing health administration, professional licensing, and privacy statutes, layered on top of federal requirements from the FDA, FTC, and HIPAA. If you are deploying an AI diagnostic tool in a Florida hospital, you are already subject to binding obligations. There is no grace period waiting for a single omnibus bill.

The agencies you answer to:

• Florida Agency for Health Care Administration (AHCA): Facility licensure and health data oversight (Fla. Stat. § 408.001 et seq.)
• Florida Department of Health (FDOH), Division of Medical Quality Assurance: Clinician licensing and discipline (Fla. Stat. § 456.001 et seq.)
• Florida Board of Medicine: Scope-of-practice standards for physicians using AI tools (Fla. Admin. Code Rule 64B8)
• Federal Overlay: HIPAA (45 CFR Parts 160/164), FDA device regulation, and the FTC Act

Who this page is for: hospital compliance officers, telehealth operators, health-tech vendors selling into Florida, and clinicians using AI diagnostic or clinical decision-support tools. If you fall into any of those categories, read the sections on liability and vendor contracting before anything else.

Florida Statutes Governing AI-Assisted Clinical Decision-Making

Standard of Care and Malpractice Exposure

Florida's medical malpractice framework does not mention AI, but it governs any AI-assisted clinical error. Under Fla. Stat. § 766.102, the standard of care is what a reasonably prudent similar health care provider would do under similar conditions. A physician who relies on an AI diagnostic recommendation that a competent clinician would have questioned can be held liable for that reliance. The AI vendor's involvement does not transfer the physician's duty of care to the vendor.

Florida courts have not yet produced an appellate decision squarely addressing AI-assisted malpractice, but the § 766.102 framework is broad enough to reach it. Expect plaintiffs' counsel to argue that uncritical adoption of an AI output, without independent clinical judgment, itself falls below the standard of care.

Scope of Practice: Physicians, APRNs, and PAs

The practice of medicine in Florida is defined under Fla. Stat. § 458.305 for allopathic physicians and Fla. Stat. § 459.003 for osteopathic physicians. Both definitions turn on diagnosis, treatment, and the application of clinical judgment. An AI tool that generates a diagnosis or treatment recommendation is performing a function that, when done by a human, requires a Florida medical license.

This means AI vendors must structure their products as decision-support tools that surface information to a licensed clinician, not as autonomous decision-makers. The clinician must exercise independent judgment before any AI output reaches a patient in a clinically actionable form. APRNs and PAs using AI tools operate within their own scope-of-practice limits under Fla. Stat. § 464.012 (nursing) and Fla. Stat. § 458.347 (physician assistants), respectively.

Florida Telehealth Act

Fla. Stat. § 456.44 governs telehealth practice in Florida. It requires that telehealth providers establish a valid patient-provider relationship and adhere to the same standard of care as in-person encounters. AI-driven remote monitoring tools used in a telehealth context must be supervised by a licensed provider who can act on the AI's output. No 2024 amendments to § 456.44 specifically addressed AI-driven remote monitoring, so the general standard-of-care and licensure requirements remain the operative constraints.

Unlicensed Practice of Medicine

Fla. Stat. § 458.327 makes the unlicensed practice of medicine a third-degree felony. A health-tech vendor whose AI product crosses from decision support into autonomous clinical recommendation, without a licensed clinician in the loop, risks being characterized as practicing medicine without a license. Vendors should obtain a legal opinion on product architecture before Florida deployment, particularly for tools that generate differential diagnoses or prescribing suggestions directly to patients.

Board of Medicine Guidance

As of this publication, the Florida Board of Medicine has not issued a formal opinion or rule specifically addressing AI diagnostic tools or clinical decision-support software. Providers seeking formal guidance can request an informal advisory opinion through the process described in the Next Steps section. Monitor Fla. Admin. Code Rule 64B8 for any rulemaking activity.

Patient Consent, Data Privacy, and AI Transparency Requirements

Florida's Health Privacy Framework and HIPAA

Florida's health privacy requirements are grounded in HIPAA, but other state laws, including the Florida Digital Bill of Rights, impose related data protection obligations. HIPAA's Privacy and Security Rules (45 CFR Parts 160/164) set the federal floor. Florida providers feeding patient data into AI systems must have a valid HIPAA authorization or a recognized exception (treatment, payment, or operations) before doing so.

Informed Consent and AI Disclosure

Florida's Patient Bill of Rights and Responsibilities (Fla. Stat. § 765.110) requires that patients receive information necessary to give informed consent to treatment. No Florida statute explicitly requires disclosure that an AI tool was used in diagnosis or treatment planning. However, if a patient asks, withholding that information could implicate informed consent doctrine under § 766.103 (Florida Medical Consent Law). Prudent providers document AI tool use in the medical record and disclose it when it materially affects the treatment decision.

Florida Digital Bill of Rights (SB 262, 2023)

Florida's Digital Bill of Rights (Fla. Stat. § 501.702 et seq., enacted as SB 262 in 2023) grants consumers rights over personal data processed by large online platforms. The law includes a carve-out for data processed by HIPAA-covered entities and business associates when that data is used for treatment, payment, or healthcare operations. Health data processed solely for those purposes by a covered entity or its BA is substantially exempt from the Digital Bill of Rights' consumer-rights provisions. The carve-out is not unlimited: health data processed by a non-covered AI vendor for purposes beyond treatment (such as model training or product improvement) may fall back under the statute's scope. Consult AHCA or a Florida healthcare attorney for a fact-specific analysis of a vendor's data use.

De-Identification for AI Model Training

If a Florida provider or vendor wants to train an AI model on patient data, de-identification must meet the standards of 45 CFR § 164.514 (either the Expert Determination or Safe Harbor method). Florida law does not impose a stricter de-identification standard, but AHCA has authority to investigate health data misuse under Fla. Stat. § 408.001 et seq.

Breach Notification

Florida's Information Protection Act (FIPA), Fla. Stat. § 501.171, requires notification to affected individuals within 30 days of determining a breach of personal information has occurred. For a breach involving an AI system that processes protected health information, both FIPA and HIPAA's breach notification rule (45 CFR §§ 164.400–414) apply. HIPAA's 60-day notification window is longer than FIPA's 30-day requirement. Florida providers must meet the shorter FIPA deadline.

Right to Human Review

Florida law does not currently establish an explicit statutory right for patients to request human review of an AI-generated clinical decision. Providers can prepare for potential future regulation by building a human-review option into their AI deployment workflows.

Licensing, Certification, and Vendor Compliance Requirements

Business Associate Agreements

Any AI vendor that accesses, processes, or stores protected health information on behalf of a Florida covered entity must execute a Business Associate Agreement (BAA) that meets 45 CFR § 164.504(e) requirements. This is a federal HIPAA obligation, but Florida AHCA can investigate HIPAA-related complaints and refer them to the HHS Office for Civil Rights. Do not deploy an AI tool that touches PHI without a signed BAA in place.

AHCA Facility Licensure

Florida health care facilities are licensed under Fla. Stat. § 408.031 et seq. and Fla. Stat. § 395.003 (hospitals). Deploying an AI-integrated EHR or diagnostic system does not by itself require a new facility license or a license amendment. If the AI tool changes the scope of services offered, such as enabling a facility to offer a new clinical specialty, that change may require AHCA notification or approval. Consult AHCA's facility licensing unit before expanding AI-enabled service lines.

Certificate of Need

Florida's Certificate of Need (CON) law (Fla. Stat. § 408.034 et seq.) applies to specific categories of health care facility construction, establishment, and service expansion. CON requirements were significantly narrowed by the Florida Legislature between 2019 and 2023. Current CON review applies primarily to new hospitals, nursing homes, hospices, and certain specialty facilities. Adding an AI diagnostic tool to an existing licensed service line is unlikely to trigger CON review on its own. However, if an AI tool enables a facility to offer a new CON-regulated service, consult AHCA's CON unit for a threshold determination.

FDA Software as a Medical Device (SaMD)

AI tools that meet the FDA's definition of Software as a Medical Device are subject to FDA clearance or approval under 21 CFR Part 820 and applicable FDA SaMD guidance. Florida providers are responsible for verifying that any AI clinical tool they deploy has the appropriate FDA regulatory status before use. Ask vendors for their FDA 510(k) clearance number, De Novo authorization, or a written explanation of why their product qualifies for enforcement discretion. Deploying an AI tool that requires FDA clearance but lacks it exposes the provider to FDA enforcement and, in a malpractice context, to a negligence per se argument.

Contractual Liability Allocation

Florida contract law governs indemnification between health systems and AI vendors. Florida courts enforce indemnification clauses, including those that shift liability for AI errors to the vendor, provided the language is clear and unambiguous. Health systems should negotiate for: (1) vendor indemnification for claims arising from defects in the AI algorithm itself; (2) representations and warranties that the tool has required FDA clearance; (3) audit rights over the vendor's HIPAA compliance program; and (4) breach notification obligations that meet FIPA's 30-day window.

Pre-Deployment Checklist for Florida Hospitals

Before deploying a third-party AI clinical tool, verify:

• Signed BAA covering all PHI the tool will access
• FDA regulatory status confirmed in writing from vendor
• Vendor's HIPAA Security Rule compliance documentation reviewed
• Tool architecture reviewed by legal counsel for unlicensed practice risk
• Informed consent and disclosure language added to patient intake forms if the tool affects diagnosis or treatment
• AHCA notified if the tool enables a new or expanded service line
• Staff training completed on the tool's limitations and the requirement for independent clinical judgment
• Incident response plan updated to address AI-specific breach scenarios

What Changed Recently: 2024–2025 Florida AI Legislative Activity

2024 Legislative Session

The 2024 Florida legislative session produced no statute specifically governing AI in clinical settings. The most visible AI-related bill was HR 8057, a ceremonial House resolution designating "Gator Day," which was adopted. It has no healthcare or AI policy content.

No Florida bill from the 2024 session substantively addressed clinical AI governance, algorithmic transparency in healthcare, or AI-specific liability rules.

Governor's Regulatory Approach

Florida's executive branch has favored market-driven standards and existing federal frameworks over new state-level AI-specific legislation. This approach makes a near-term Florida omnibus AI-in-healthcare statute less likely, but it does not prevent agency-level rulemaking by AHCA or FDOH.

Federal Developments Affecting Florida Providers

Two federal actions from 2024 affect Florida AI healthcare compliance:

**ONC HTI-1 Final Rule (45