FDUTPA at Work: The Ten Most Important Federal and Florida Decisions of the Last Decade Under the Florida Deceptive and Unfair Trade Practices Act — and Key Considerations for Florida E-Commerce and Technology Businesses

The Florida Deceptive and Unfair Trade Practices Act, Fla. Stat. §§ 501.201–501.213, is the most frequently pleaded business statute in Florida. It declares unlawful any “unfair methods of competition, unconscionable acts or practices, and unfair or deceptive acts or practices in the conduct of any trade or commerce,” it gives consumers, competitors and the Attorney General the right to enforce that prohibition, and because it borrows the standards of Section 5 of the Federal Trade Commission Act, it has grown with the law of consumer protection generally. For an online retailer, a software-as-a-service provider, an app developer or a platform operating in Florida, FDUTPA is the statute under which a customer’s complaint about a subscription, a competitor’s complaint about an advertisement, and the Attorney General’s complaint about a product design will all be brought.

The decade since 2016 has produced a body of decisions that define who can sue under FDUTPA, what they must plead and prove, what damages they can recover, when federal law provides a defense, how class actions are certified, and—most recently—how the Attorney General is using the Act against technology companies. This post identifies the ten decisions from the Eleventh Circuit, Florida’s federal district courts and Florida’s appellate courts that, in our judgment, matter most, and then sets out the key considerations they raise for Florida e-commerce and technology businesses.

For an overview of the statute, see our FDUTPA page; for related enforcement and defense services, see Litigation & Enforcement and Litigation Defense.

FDUTPA in Brief:

A private FDUTPA claim for damages has three elements: a deceptive act or unfair practice, causation, and actual damages. A deceptive act is a representation, omission or practice that is likely to mislead a consumer acting reasonably in the circumstances, to the consumer’s detriment. An unfair practice is one that offends established public policy or is immoral, unethical, oppressive, unscrupulous or substantially injurious to consumers. The standard is objective—the question is whether a reasonable consumer would be misled, not whether the particular plaintiff was—and, as the decisions below confirm, the plaintiff need not prove that he or she actually relied on the deception. Section 501.211(1) allows any person aggrieved by a violation to obtain a declaratory judgment and an injunction, § 501.211(2) allows a person who has suffered a loss to recover actual damages plus attorney’s fees and costs, § 501.212 excludes, among other things, acts or practices required or specifically permitted by federal or state law, and the Attorney General may seek injunctions, restitution, and civil penalties of up to $10,000 per violation (and up to $50,000 per violation under Florida’s 2024 online-protections statute for minors, § 501.1736). A four-year limitations period applies.

The Ten Decisions:

1. Carriuolo v. General Motors Co., 823 F.3d 977 (11th Cir. 2016) — no reliance required, damages measured objectively, and classes certified on that basis

General Motors shipped 2014 Cadillac CTS sedans with federally mandated Monroney window stickers displaying perfect five-star safety ratings in three categories at a time when the National Highway Traffic Safety Administration had not yet rated the vehicle. Purchasers sued under FDUTPA, and the Southern District of Florida certified a class of Florida buyers. The Eleventh Circuit affirmed. The court held that a FDUTPA plaintiff “need not show actual reliance on the representation or omission at issue”, but that the inquiry is whether the practice was likely to deceive a reasonable consumer, an objective question that does not vary from buyer to buyer. Actual damages, the court held, are measured by the benefit of the bargain—the difference between the market value of the product as represented and its value as delivered—and a manufacturer that obtains “enhanced negotiating leverage” from a false representation has inflicted a class-wide price premium that can be calculated without individualized proof. Differences in what individual buyers knew, noticed or negotiated did not defeat predominance.

Why it matters. Carriuolo is the foundation of modern FDUTPA class litigation. Because reliance is irrelevant and damages are measured by an objective market value formula, a single misleading label, product page, feature description or pricing display on an e-commerce site can support a class of every Florida purchaser. For a technology business, the lesson is that accuracy in the standardized representations made to all customers—the specification sheet, the plan comparison page, the “features” list—is a class-action issue, not a customer-service issue.

2. Bailey v. St. Louis, 196 So. 3d 375 (Fla. 2d DCA 2016), and Caribbean Cruise Line, Inc. v. Better Business Bureau of Palm Beach County, 169 So. 3d 164 (Fla. 4th DCA 2015) — competitors and other non-consumers may sue for damages

For years, after the Legislature amended § 501.211(2) in 2001 to replace the word “consumer” with “person,” trial courts continued to dismiss FDUTPA claims by businesses on the ground that the plaintiff was not a consumer. Two district court of appeal decisions ended the practice. In Caribbean Cruise Line, the Fourth District held that the amendment “indicates that the legislature no longer intended FDUTPA to apply to only consumers,” allowing a cruise marketer to proceed against a business-rating organization. In Bailey, the trial court had found FDUTPA violations but awarded a competitor only injunctive relief, reasoning that it was not a consumer. The Second District reversed, holding that the 2001 change was a substantial and material change in the statute’s language that must be presumed to have been intended, and remanded for a determination of actual damages. Federal courts in Florida have since followed both decisions.

Why it matters. FDUTPA is a competitor’s statute as well as a consumer’s. A Florida technology company harmed by a rival’s false advertising, fake reviews, deceptive comparison marketing or misappropriated trade dress can sue for damages under FDUTPA alongside, or instead of, the Lanham Act—and can be sued on the same theories. The remaining limits are on the measure of damages, discussed in the next decision and in the considerations below.

3. Stewart Agency, Inc. v. Arrigo Enterprises, Inc., 266 So. 3d 207 (Fla. 4th DCA 2019) — a competitor must show a direct injury, and injunctive relief requires consumer harm

A Toyota dealer that refused to sell used vehicles with unrepaired Takata airbag recalls sued a competing dealer that sold such vehicles after disclosing the recall to buyers, claiming that the competitor’s practice gave it an unfair advantage. The Fourth District affirmed summary judgment for the defendant. A business plaintiff, the court explained, must show that its legal rights were adversely affected or that it was damaged financially by a legally infringing act. A business seeking declaratory or injunctive relief under § 501.211(1) must additionally show that the practice was injurious to consumers. The plaintiff satisfied neither. The competitor had disclosed the recalls, so no consumer was deceived, the plaintiff’s losses flowed from its own decision to hold inventory, and the causal connection between the competitor’s sales and the plaintiff’s lost sales was “completely speculative.”

Why it matters. Stewart Agency draws the boundary around Bailey and Caribbean Cruise Line. A competitor may sue, but it must tie its damages directly to the defendant’s deception of the market, and it cannot use FDUTPA to police a rival’s lawful, disclosed business practices. Florida courts have also consistently held that a competitor’s future lost profits are consequential damages outside § 501.211(2), while several federal decisions have treated past lost profits, proven with reasonable certainty, as recoverable actual damages. A competitor’s FDUTPA case must therefore be built on evidence of diverted sales, not on a theory of general market unfairness.

4. Debernardis v. IQ Formulations, LLC, 942 F.3d 1076 (11th Cir. 2019) — buying a product that could not lawfully be sold is an economic injury

Purchasers of a dietary supplement containing DMBA, an ingredient the manufacturer had never notified to the FDA as required for new dietary ingredients, sued under FDUTPA and the consumer statutes of other states, alleging that the product was adulterated under federal law and therefore worthless. The district court dismissed for lack of Article III standing because the plaintiffs did not allege that the supplement had harmed them or failed to perform. The Eleventh Circuit vacated. Under a benefit-of-the-bargain theory, a consumer who pays for a product that Congress has prohibited from sale receives something of no value and has suffered a concrete economic injury, regardless of whether the product worked. The plaintiffs “would not have purchased” the product had they known its sale was illegal.

Why it matters. Debernardis opened the door to FDUTPA claims premised on regulatory non-compliance rather than on a product’s performance: a product sold without a required approval, registration, disclosure or license may be “worthless” as a matter of law. For technology and e-commerce businesses, the analog is the app, device, supplement, cosmetic or financial product that is marketed without the certification, notice or license the governing regulation requires. The Eleventh Circuit’s later decision in Marrache limits the theory to products whose sale is actually prohibited.

5. Marrache v. Bacardi U.S.A., Inc., 17 F.4th 1084 (11th Cir. 2021) — the federal-law safe harbor and the actual-damages requirement

A purchaser of Bombay Sapphire gin sued Bacardi and Winn-Dixie under FDUTPA because the gin contained grains of paradise, a botanical that an 1868 Florida statute, § 562.455, makes it a felony to add to liquor. The Eleventh Circuit held, first, that the Florida statute was not preempted by federal food-additive law, because a seller could comply with both by omitting the ingredient in Florida. But the FDUTPA claim failed on two independent grounds. Section 501.212(1) exempts “an act or practice required or specifically permitted by federal or state law,” and the FDA had specifically permitted grains of paradise as a generally recognized as safe food additive; the safe harbor therefore applied. And the plaintiff had not plausibly alleged actual damages: he bought the gin, drank it, sought no refund and suffered no harm, and the court declined to extend Debernardis to a product that federal law deems safe merely because a state statute forbade it.

Why it matters. Marrache is the leading modern authority on the two defenses that most often end FDUTPA cases at the pleading stage. The safe harbor is broad: conduct that a federal agency or a Florida regulator has affirmatively permitted—a labeling format, a disclosure, a fee, an ingredient—cannot be deceptive under FDUTPA even if some other law is offended. And “actual damages” means a measurable economic loss. A plaintiff who received and used what he paid for, and cannot show a market-value difference, has none.

6. In re Mednax Services, Inc., Customer Data Security Breach Litigation, MDL No. 2994 (S.D. Fla. Aug. 18, 2022) — FDUTPA reaches data-security failures, and supports injunctive relief without damages

A phishing attack on a national physician-services company exposed the personal and health information of more than a million patients, and the resulting class actions were consolidated in the Southern District of Florida. On the defendants’ partial motion to dismiss, the court trimmed several claims but allowed the FDUTPA count to proceed, holding that the plaintiffs could seek declaratory and injunctive relief under § 501.211(1) whether or not they could establish damages, because FDUTPA does not limit the remedies a plaintiff may pursue once a violation is adequately alleged. The decision follows a line of Florida federal authority, beginning with Burrows v. Purchasing Power, LLC (S.D. Fla. 2012), treating the failure to implement reasonable data security, and the failure to notify affected persons promptly, as unfair practices under the FTC Act standard that FDUTPA incorporates, because the resulting injury is not reasonably avoidable by consumers and is not outweighed by countervailing benefits.

Why it matters. For every technology business that stores customer data, FDUTPA is the vehicle through which a breach becomes a Florida class action. The decision confirms that plaintiffs need not wait for identity theft to obtain injunctive relief requiring security improvements, and that representations about data security in privacy policies and terms of service are actionable if they overstate what the company actually does. Florida’s Information Protection Act, § 501.171, sets the notification obligations and FDUTPA supplies the private remedy.

7. Tershakovec v. Ford Motor Co., 79 F.4th 1299 (11th Cir. 2023) — FDUTPA classes survive where other states’ fraud classes fail

Ford marketed its Shelby GT350 Mustang as “track ready,” but two trim levels lacked the transmission and differential coolers needed to sustain track driving and would enter a reduced-power “limp mode” after several laps. The district court certified statewide classes under the consumer-protection and common-law fraud claims of multiple states. The Eleventh Circuit affirmed certification of the Florida FDUTPA class, together with the statutory classes for New York, Missouri and Washington, and vacated certification of the classes asserting common-law fraud and the Texas statutory claim. The dividing line was reliance. Where a state’s law requires proof of individual reliance, the question of what each buyer saw and believed defeats predominance. Where, as under FDUTPA, the statute asks only whether the practice was likely to deceive an objectively reasonable consumer, the claim can be resolved with common proof. The court also cautioned that the plaintiffs must still prove causation—that the deceptive practice caused their loss—on a class-wide basis.

Why it matters. Tershakovec confirms Carriuolo and explains why Florida is a favored forum for consumer class actions against national sellers: a FDUTPA class will often be certified where the same facts would not support a fraud class elsewhere. The decision also shows the value of a granular record on marketing: Ford’s “track ready” statements were made in materials that reached all buyers, which is precisely what makes a class certifiable.

8. Pop v. LuliFama.com LLC, 145 F.4th 1285 (11th Cir. 2025) — influencer marketing, and Rule 9(b) for FDUTPA claims that sound in fraud

A consumer bought swimwear after seeing Instagram posts by influencers who tagged the brand without disclosing that they had been paid, in violation of the Federal Trade Commission’s endorsement guides. He sued the brand and the influencers under FDUTPA (and the Lanham Act) on the theory that the undisclosed sponsorship was a deceptive omission. The Eleventh Circuit affirmed dismissal. In an opinion by Judge Branch, the court held that Federal Rule of Civil Procedure 9(b)’s particularity requirement applies to FDUTPA claims that “sound in fraud”—a determination that depends on the substance of the allegations, not the label the plaintiff attaches—and that a claim of misrepresentation by omission of material facts is such a claim. The complaint failed because it did not identify which posts the plaintiff saw, who made them, when, which products he bought in response, or how the posts motivated his purchase.

Why it matters. Pop is the first published Eleventh Circuit decision to require FDUTPA plaintiffs to plead the who, what, when, where and how of a deceptive representation, and it gives defendants a powerful early motion. It also puts brands and creators on notice that undisclosed paid endorsements, including influencer posts, affiliate links, sponsored reviews and “organic” social content, are a recognized FDUTPA theory, one the Attorney General can pursue without the pleading obstacles a private plaintiff faces.

9. State v. Snap Inc. (Fla. Cir. Ct. 2025) and State v. TikTok Inc. (Fla. Cir. Ct., St. Lucie County, filed June 15, 2026) — FDUTPA and the Online Protections for Minors law against platform design

Beginning in April 2025, the Attorney General filed a series of actions against social media platforms under FDUTPA and Florida’s 2024 Online Protections for Minors statute, § 501.1736, which restricts accounts for children under 14, requires parental consent for 14- and 15-year-olds, prohibits certain “addictive” design features directed at minors, and makes violations unfair or deceptive practices enforceable by the Attorney General with civil penalties of up to $50,000 per violation. The Snap complaint alleged that Snapchat’s design features—streaks, ephemeral messaging, push notifications and autoplay—are addictive to minors, that the company’s age-verification and parental-consent mechanisms are inadequate, and that its public representations about safety were deceptive. The TikTok complaint, filed in June 2026, asserts similar theories against TikTok and ByteDance and seeks civil penalties, punitive damages and disgorgement. The cases are pending, and a suit against Roblox over child-safety failures and an investigation of Discord followed.

Why it matters. These actions mark the shift of Florida FDUTPA enforcement from advertising claims to product design. The theory is that features engineered to maximize engagement are themselves “unfair” practices when directed at minors, and that safety representations are “deceptive” when the underlying systems do not perform as described. Any Florida-facing app, game or platform with users under 18 is within the reach of § 501.1736, and its design decisions, age-gating and parental-control features are now enforcement subjects.

10. State v. OpenAI, Inc. (Fla. Cir. Ct. Highlands County, filed June 1, 2026), and State v. Netflix, Inc. (Fla. Cir. Ct. St. Johns County, filed Sept. 9, 2026) — FDUTPA applied to generative AI and to data-collection representations

On June 1, 2026, the Attorney General sued OpenAI and its chief executive, asserting two FDUTPA counts and a public-nuisance claim. The complaint alleges that ChatGPT was marketed as safe and reliable while the company knew of hallucinations, failures of its safety filters and risks to minors and vulnerable users, that the company deployed the product without adequate safeguards, and that it collected user data without meaningful disclosure. The State seeks disgorgement, restitution, civil penalties of up to $10,000 per violation and a permanent injunction, and has demanded a jury trial.

Three months later, on September 9, 2026, the Attorney General sued Netflix, alleging that the company represented to consumers that it would remain ad-free and would not collect user data, then built a behavioral-advertising infrastructure beginning in November 2022 while continuing to make those assurances, and that it used design features to keep children on the platform. Both cases are at the pleading stage.

Why it matters. OpenAI is the first Florida enforcement action to treat the marketing and deployment of a generative AI product as a FDUTPA matter, and its omission theory—that a company deceives consumers when it fails to disclose known limitations and risks of an AI system—will be tested in every AI-enabled product sold in Florida. Netflix is a reminder that a privacy policy, a terms-of-service page and a public statement about advertising or data collection are representations under FDUTPA, and that changing a business model without changing the representations is the paradigm of a deceptive practice. Together with the platform cases, these actions establish that the Attorney General regards FDUTPA as Florida’s primary technology-regulation statute.

Other Decisions Worth Noting:

Several other decisions inform the picture. Deere Construction, LLC v. Cemex Construction Materials Florida, LLC, 198 F. Supp. 3d 1332 (S.D. Fla. 2016), is frequently cited for the definition of “actual damages” as the difference in market value between the product as promised and as delivered, and for the exclusion of consequential damages. Off Lease Only, Inc. v. LeJeune Auto Wholesale, Inc., 187 So. 3d 868 (Fla. 3d DCA 2016), applied Lanham Act likelihood-of-confusion principles to a FDUTPA claim between competitors over similar trade names. And the Eleventh Circuit’s decision in Cherry v. Dometic Corp., 986 F.3d 1296 (11th Cir. 2021), holding that administrative feasibility of identifying class members is not a precondition to certification, removed a defense on which consumer-product defendants in this circuit had relied, and applies with full force to FDUTPA classes.

Key Considerations for Florida E-Commerce and Technology Businesses:

The decisions above describe a statute that is easy to invoke, hard to dismiss when properly pleaded, and increasingly used by the State against technology companies. The following considerations follow from them.

1. Treat every standardized representation as a class-action exposure

Carriuolo and Tershakovec mean that a product page, plan-comparison chart, feature list, specification, badge (“secure,” “encrypted,” “ad-free,” “track ready”), or pricing display shown to all Florida customers can support a class of all of them, without proof that anyone read or relied on it. Review marketing copy and product descriptions for accuracy at launch and at every change, keep a record of when each version was live, and reconcile the marketing claim with the engineering reality before publication.

2. Keep the privacy policy and terms of service true — and update them before the business model changes

Netflix and Mednax show that statements about data collection, advertising and security are FDUTPA representations. A company that begins collecting or monetizing data, adds advertising, changes retention practices or reduces security must revise its disclosures first and give the notice its own terms require. A privacy policy that describes practices the company no longer follows is a deceptive act. A security statement that overstates the controls actually implemented is another.

3. Implement and document reasonable data security

Under the FTC Act unfairness standard that FDUTPA incorporates, the failure to maintain reasonable security is an unfair practice. Adopt a written security program appropriate to the data held, follow a recognized framework, test it, and keep the records that prove it. Prepare an incident-response plan that meets the 30-day notification requirement of § 501.171 so that the delayed-notice theory in Burrows is never available.

4. Disclose paid endorsements, affiliate relationships and sponsored content

Pop confirms that undisclosed sponsorship is a FDUTPA omission theory. Require every influencer, affiliate and reviewer engaged by the company to use clear disclosures (“#ad,” “paid partnership”), include the requirement in the contract, monitor compliance, and disclose the company’s own material connections in reviews, testimonials and comparison content. Fake or incentivized reviews, and the suppression of negative ones, are unfair practices under both FDUTPA and the FTC’s 2024 rule on consumer reviews.

5. Design for minors deliberately — or keep them off the platform

The Snap, TikTok and Roblox actions target engagement features, age verification and parental consent. A Florida-facing product with users under 18 should determine whether § 501.1736 applies, implement age-assurance and parental-consent flows that actually work, evaluate autoplay, streaks, infinite scroll, push notifications and similar features for compliance, and document the analysis. A product that does not intend to serve minors should say so and enforce it.

6. Describe AI capabilities and limitations accurately

The OpenAI complaint treats the marketing of an AI product as safe and reliable, without disclosure of known failure modes, as a deceptive practice. Any product that uses generative AI—chatbots, content tools, recommendation engines, automated decision systems—should describe what it does, disclose material limitations (hallucination, bias, error rates, the absence of professional review), avoid unqualified claims of accuracy or safety, and substantiate performance claims with testing the company can produce.

7. Substantiate before you claim

FDUTPA, like Section 5, requires a reasonable basis for objective claims at the time they are made. “Fastest,” “most secure,” “clinically proven,” “#1 rated,” “guaranteed,” and comparative claims against competitors should each be supported by evidence in the file before publication. A competitor’s FDUTPA claim under Bailey is easiest to bring, and hardest to defend, against an unsubstantiated superiority claim.

8. Structure subscriptions, fees and renewals to be transparent

Automatic renewals, free trials that convert, add-on fees and cancellation friction are recurring FDUTPA subjects and are separately regulated by Florida’s automatic-renewal statute, § 501.165, and by the FTC’s negative-option rule. Disclose the material terms clearly before the consumer commits, obtain affirmative consent, send the required notices, and make cancellation as easy as enrollment. Fees that a statute or regulator has specifically permitted may fall within the Marrache safe harbor, but fees that are merely undisclosed do not.

9. Use FDUTPA offensively against unfair competitors — with the right evidence

Bailey and Caribbean Cruise Line give a Florida business standing to sue a competitor for false advertising, fake reviews, deceptive comparison marketing, counterfeit or knock-off listings and trade-dress imitation, and FDUTPA’s attorney’s-fee provision is available to a prevailing plaintiff. Stewart Agency means the case must be built on evidence that the competitor deceived the market and that the plaintiff lost identifiable sales as a result. Past lost profits proven with reasonable certainty are recoverable, speculative future profits are not. Pair the claim with Lanham Act § 43(a) where the conduct crosses state lines.

See Trademark Matters and Cease and Desist Letters.

10. Plead and defend with the current Eleventh Circuit rules

A FDUTPA plaintiff in federal court should plead the who, what, when, where and how of any misrepresentation to satisfy Pop, allege a concrete economic loss to satisfy Marrache and Debernardis, and plead causation on a class-wide basis to satisfy Tershakovec. A defendant should examine every claim for the safe harbor—is the challenged act required or specifically permitted by a federal or state regulator?—for the absence of actual damages, for a Rule 9(b) deficiency, and for the four-year limitations period. Because FDUTPA’s fee provision is reciprocal, a defendant that prevails may recover its fees, and the court’s discretion to award them is a meaningful deterrent to weak claims.

Conclusion

Over the past decade FDUTPA has become, in the hands of consumers, competitors and the Attorney General alike, the statute that governs how technology products are described, sold, secured and designed in Florida. The courts have made it a plaintiff’s statute in its elements—no reliance, objective deception, class-friendly damages—and a defendant’s statute in its defenses—the federal safe harbor, the actual damages requirement, and now Rule 9(b). The Attorney General has extended it from advertising to product design, data practices and artificial intelligence.

For Florida e-commerce and technology businesses, the response is the same in every case: say only what is true and substantiated, disclose what is material, secure what is entrusted, design for the users the product actually has, and keep the record that proves it.

If your company would like a FDUTPA review of its marketing, terms, privacy and data-security representations, is responding to an Attorney General inquiry or a class action, or needs to stop a competitor’s deceptive practices, please visit our FDUTPA, Litigation & Enforcement and Technology & Start-Up Services pages, or contact us at 305-374-8303.