Is Doxxing Illegal in Florida? Laws, Penalties, and Remedies

Yes, doxxing is illegal in Florida, even though no state statute uses that word. Publishing someone’s private information online to harass, threaten, or endanger them can be prosecuted under Florida’s cyberstalking law, its criminal-use-of-personal-identification statutes, and its written threats law, with penalties ranging from a first-degree misdemeanor to a second-degree felony carrying up to 15 years in prison. Victims can also petition for a free protective injunction and sue the person responsible for damages.

Which Florida Laws Doxxing Can Violate

Cyberstalking

Florida’s stalking statute, Section 784.048, is the most direct tool. Cyberstalking means using electronic communication to direct words or images at a specific person, causing substantial emotional distress, where the communication serves no legitimate purpose.1Florida Senate. Florida Statutes 784.048 – Stalking; Definitions; Penalties It also covers accessing someone’s online accounts or internet-connected home systems without permission.

The key element is “course of conduct” — a pattern of acts over any period showing a continuity of purpose. One post sharing an address probably won’t qualify. A sustained campaign of publishing personal details, encouraging others to contact the victim, or repeatedly sharing location updates almost certainly will. The behavior must also be willful and malicious, not accidental and not done for a legitimate reason like journalism.

When the doxxer also makes a credible threat that places the victim in reasonable fear for their safety or their family’s, the charge becomes aggravated stalking.1Florida Senate. Florida Statutes 784.048 – Stalking; Definitions; Penalties Posting a home address alongside language like “someone should pay them a visit” can establish that implied threat without any explicit statement of violence.

Criminal Use of Personal Identification Information

Section 817.568 criminalizes using another person’s personal identification information for the purpose of harassing them without their consent.2The Florida Legislature. Florida Statutes 817.568 – Criminal Use of Personal Identification Information This is where doxxing and identity crimes overlap most clearly: someone collects a victim’s details and broadcasts them specifically to cause harassment.

A related statute, Section 817.5685, makes it illegal to intentionally possess another person’s personal identification information without authorization. That statute defines “personal identification information” to include Social Security numbers, driver license numbers, passport numbers, bank account numbers, and credit or debit card numbers.3Florida Public Law. Florida Statutes 817.5685 – Unlawful Possession of the Personal Identification Information of Another Person That list is narrower than many people expect. It does not explicitly cover names, home addresses, phone numbers, or email addresses. If the doxxing involves those kinds of details rather than financial data, the cyberstalking statute or Section 817.568’s harassment provision is the stronger legal path.

Written or Electronic Threats

When doxxing crosses into explicit threats, Section 836.10 applies. It is a second-degree felony to send, post, or transmit any writing or electronic record threatening to kill or cause bodily injury to another person, or threatening a mass shooting or act of terrorism.4Justia Law. Florida Statutes 836.10 – Written or Electronic Threats to Kill, Do Bodily Injury, or Conduct a Mass Shooting or an Act of Terrorism The threat does not have to be signed. Anonymous posts qualify. Publishing someone’s workplace address along with “this person deserves what’s coming” can be read as a threat of bodily harm.

Penalties

The exposure depends on which charge fits the conduct.

These charges are not mutually exclusive. A single doxxing incident can produce multiple charges stacked together, such as cyberstalking plus a written threat, which is how some cases generate prison exposure well beyond what any single statute suggests.

When Federal Law Applies

Online harassment almost always crosses state lines, and federal law can reach it. Under 18 U.S.C. § 2261A, it is a federal crime to use an interactive computer service or electronic communication system to engage in a course of conduct that places a person in reasonable fear of death or serious bodily injury, or causes substantial emotional distress, when done with intent to harass or intimidate.7Office of the Law Revision Counsel. 18 USC 2261A – Stalking A conviction typically carries up to five years in federal prison, with higher maximums if the victim suffers serious bodily injury.8Office of the Law Revision Counsel. 18 USC 2261 – Interstate Domestic Violence Federal prosecutors rarely bring pure doxxing cases, but the statute gives them authority to step in when local law enforcement cannot reach an out-of-state perpetrator.

Getting a Protective Injunction

Victims do not have to wait for criminal charges. Florida Statute 784.0485 creates a civil cause of action that lets a stalking or cyberstalking victim petition the circuit court for an injunction for protection, and it expressly covers cyberstalking.9The Florida Legislature. Florida Statutes 784.0485 – Injunction for Protection Against Stalking Filing is free — the clerk cannot charge a filing fee for these petitions.

If the court finds evidence of stalking, it can issue a temporary ex parte injunction for up to 15 days, followed by a full hearing. A final injunction can order the respondent to stop the behavior, attend counseling at their own expense, and comply with other protective measures. The respondent also loses the right to possess firearms or ammunition for the duration of the injunction. You can file where you live, where the respondent lives, or where the stalking occurred, which matters when the perpetrator is in a different part of the state.

Suing the Doxxer for Damages

A civil lawsuit is separate from any criminal case and stays in the victim’s control. The two most common claims are invasion of privacy and intentional infliction of emotional distress. Invasion of privacy requires showing that the information disclosed was genuinely private and that a reasonable person would find its public release highly offensive. Intentional infliction of emotional distress requires proving the conduct was outrageous, beyond the bounds of what a civilized society tolerates, and that it caused severe emotional suffering.

A successful case can recover therapy costs, lost wages, relocation expenses, and other documented harm. The tradeoff is cost. Civil litigation takes an attorney, filing fees, and often months of proceedings. Some attorneys handle harassment cases on contingency, but that depends on whether the doxxer has assets worth pursuing. A judgment against someone with no money collects nothing.

Why You Probably Cannot Sue the Platform

Under 47 U.S.C. § 230, websites and online services generally cannot be treated as the publisher of content posted by their users.10Office of the Law Revision Counsel. 47 USC 230 – Protection for Private Blocking and Screening of Offensive Material If someone posts your address on a social media site, you can pursue the poster, but the platform itself is typically shielded from liability for hosting the content. Section 230 also protects platforms that voluntarily remove harassing content in good faith. Report the content and request removal, but expect your legal leverage to run against the person who published the information, not the site.

Preserving Evidence

The biggest mistake victims make is failing to document the harassment before it disappears. Posts get deleted. Accounts get deactivated. Screenshots without metadata can be challenged. Capture every post, message, and comment that contains your personal information or threatens you, along with the URL, username, timestamp, and any visible engagement. Save native screenshots rather than photographs of a monitor.

If the harassment is ongoing, use a web archiving service to create timestamped copies of the pages. Print copies and store digital backups in at least two locations. Report the conduct to law enforcement early, even if you are unsure whether it rises to a criminal level. A police report on file establishes a timeline and shows you took the threat seriously, which matters in both criminal proceedings and any later civil suit.