Florida asks for at least two security measures on each fuel dispenser — and names a documented daily panel-opening scan as one of them.
Since January 1, 2022, Fla. Stat. § 525.07(10) (Ch. 2021-97, Laws of Florida) has required a retailer to maintain at least two of a list of security measures on each fuel dispenser. One of the listed measures is a daily inspection that opens the panels, uses a wireless-skimmer detection application, and documents it — which is where SkimGuard fits. A separate, independent measures duty also reaches Florida fuel dispensers through NIST Handbook 44 (below).
The measures — maintain at least two
- Tamper-evident tape or a seal on the dispenser panel openings
- A dispenser-panel lock not opened by a universal key
- An alarm or sensor that alerts when the panel is opened
- A device that renders the dispenser inoperable when the panel is opened without authorization
- Encryption of cardholder data at the card reader
- A daily inspection that opens the panels, uses an application that detects a wireless (Bluetooth) skimmer, and documents the inspection — § 525.07(10)(a)6
- Acceptance of a contactless (tap-to-pay) method that does not read the magnetic stripe
- Any other measure approved by the Department of Agriculture and Consumer Services
The statute deems a retailer that maintains at least two of these measures to be in compliance with the section. We report that deeming; we do not certify it. Whether a given setup qualifies is the retailer's and the department's determination, not ours.
Measure #6 is a compound act — SkimGuard supplies part of it
The sixth measure is not "an app." It is a single, conjunctive obligation: a daily inspection that opens the panels, uses an application that detects a wireless-based skimmer, and documents the inspection. You supply the daily cadence and the physical panel opening; SkimGuard supplies the detection application, an append-only, timestamped panel-opening record (a panel_opened event), and the documentation. Performing and logging that inspection is one measure done — you still choose a second from the list.
Interior comparison, on the open panel
With the panel open, SkimGuard can compare the dispenser's interior against a stored reference image and point at what changed. It is an assist that highlights a difference, never a verdict — the inspector judges. A changed interior opens the incident path, so a physical or wired skimmer the wireless scan can't see still gets caught and documented.
A second, independent measures duty: NIST Handbook 44 UR.4.2
Separately from § 525.07(10), Florida incorporates NIST Handbook 44, whose User Requirement UR.4.2 ("Security for Retail Motor-Fuel Devices," added in the 2021 edition) is a standard: it calls for measures that substantially restrict access to the device, with a non-exhaustive list and no fixed count. This duty stacks independently — maintaining two § 525.07(10) measures is not the same as meeting UR.4.2, and neither obligation suppresses the other. Whether a setup satisfies UR.4.2 is the weights-and-measures authority's determination, not SkimGuard's, and SkimGuard holds no UR.4.2 approval. SkimGuard documents what you do; it does not decide adequacy.
Read the statute
Fla. Stat. § 525.07 (see subsection (10)). Confirm the current text before relying on it.
Questions
How many measures does Florida require?
At least two of the measures listed in Fla. Stat. § 525.07(10), on each fuel dispenser, since January 1, 2022. A retailer that maintains two is deemed compliant with the section — that is the statute's deeming, which we report and do not certify.
Is SkimGuard one of the measures?
No. Measure #6 is a compound act — a daily inspection that opens the panels, uses a wireless-skimmer detection application, and documents it. You supply the daily cadence and the physical opening; SkimGuard supplies the application, the timestamped panel-opening record, and the documentation. Performing and logging that inspection is the measure; you still choose a second.
Does meeting two § 525.07 measures satisfy NIST Handbook 44 UR.4.2?
No — they are independent. UR.4.2 is a separate standard calling for measures that substantially restrict access, with no fixed count. Whether a setup meets it is the weights-and-measures authority's determination, not SkimGuard's, and SkimGuard holds no UR.4.2 approval.
Does Florida require me to report a skimmer to a state agency?
Section 525.07 focuses on the security measures rather than naming a state reporting office. Taking the pump out of service, preserving the device, and notifying law enforcement are prudent steps; SkimGuard prepares the record and you make any report.