[NathanKP]

I'm not a fan of Jeb Bush either, but what do you think of their released statement?

> This is an exact replica of the public records on file with the Florida Department of State and are available at anyone’s request under Chapter 119 sunshine laws.

It sounds to me like this is an issue with Florida policy if this sensitive data could be accessed freely already, even if they hadn't released it in this public manner.

There are many places where the blame could be laid, including in the case of SSN leakage state employees that put these SSN's into emails instead of keeping them in a safe location in a secure HR system. At any rate I don't think that Jeb Bush is the only one at fault here.

[patzerhacker]

I work for a company that deals with public records data in Florida. The "Government in the Sunshine" laws[1] that deal with access to public records are clear:

>"E-mail" messages made or received by agency employees in connection with official business are public records and subject to disclosure in the absence of an exemption.

and

>Section 668.6076, F.S., requires that any agency as defined in s. 119.011(1), F.S., or legislative entity that operates a website and uses electronic mail must post the following statement in a conspicuous location on its website:

>Under Florida law, e-mail addresses are public records.

>If you do not want your e-mail address released in response to a public records request, do not send electronic mail to this entity. Instead, contact this office by phone or in writing.

That said, there is an exemption for social security numbers, but just because something is exempt doesn't mean that it must be withheld. The body holding the requested data generally has discretion:

>Social security numbers included in an official record may be made available as part of the official records available for public inspection and copying unless redaction is requested by the holder of such number or the holder’s attorney or legal guardian; however, if such record is in electronic format, on or after January 1, 2011, the county recorder must use his or her best effort to keep the social security number confidential and exempt as provided for in s. 119.071(5)(a), F.S. Section 119.0714(3)(b), F.S.

[1] http://www.myflsunshine.com/sun.nsf/manual/5a60474cbfb8dbf48...

[VikingCoder]

http://www.leg.state.fl.us/Statutes/index.cfm?App_mode=Displ...

> Social security numbers held by an agency are confidential and exempt from s. 119.07(1) and s. 24(a), Art. I of the State Constitution. This exemption applies to social security numbers held by an agency before, on, or after the effective date of this exemption. This exemption does not supersede any federal law prohibiting the release of social security numbers or any other applicable public records exemption for social security numbers existing prior to May 13, 2002, or created thereafter.

> Social security numbers held by an agency may be disclosed if any of the following apply:

None of those things apply.

My reading is that the Governor has illegally revealed confidential information.