Brazilian DPA announces a Public Hearing on the definition of High-Risk Personal Data Processing

Recently, the Brazilian National Data Protection Authority (“ANPD” or “Brazilian DPA”) announced a Public Hearing to receive the society’s contributions and support the draft of a Guideline on High-Risk Personal Data Processing (“Guideline”), in compliance with the Brazilian General Data Protection Law (“LGPD”) and the Regulation for Small Processing Agents (“Regulation”), established by Resolution CD/ANPD […]

Brazilian DPA publishes a Resolution on the notification of data security incidents

Today, Resolution CD/ANPD no. 15, dated April 24, 2024 (“Regulation”), was published by the Brazilian National Data Protection Authority (“ANPD” or “Brazilian DPA”), regulating the rules regarding the notification of security incidents involving personal data within the scope of the ANPD. The Regulation is important since it provides further details on various aspects applicable to […]

Brazilian DPA enforces another administrative sanction due to noncompliance with the LGPD

It was published today in the Brazilian Official Gazette a decision enforcing a new sanction by the Brazilian National Data Protection Authority (“ANPD” or “Brazilian DPA”) for noncompliance with the General Data Protection Law (“LGPD”). Administrative Procedure no. 00261.001963/2022-73, involving a public entity from the state of Pernambuco as the controller, was included in the […]

Introduced Bill aiming to match ANPD’s powers with regulatory agencies and CADE’s powers

Recently, Bill no. 615/2024 was presented in the Federal Senate, aiming to expand the institutional autonomy of the Brazilian National Data Protection Authority (“ANPD” or “Brazilian DPA”). Currently, the Brazilian DPA is a special autarchy, following the amendment of Law no. 14,460/2022, which we analyzed in this newsletter. Previously, the ANPD was an entity under […]

Article “Here’s Why You Should Be Aware Of Brazil’s Data Privacy Law + 6 Key Scenarios To Consider” published on the Global Regulatory Developments Journal

An article coauthored by partner Gustavo Flausino Coelho and associate Fernando Naegele about the consequences of the LGPD to foreign companies was published on the May-June of 2024 edition of Global Regulatory Developments Journal. The paper aims to highlight the extraterritorial effects of the LGPD to companies established outside Brazil. Besides reviewing general aspects of […]

Associate obtains a Master’s Degree in Regulatory Law

We are happy to announce that our associate Fernando Naegele has obtained his Master’s Degree in Regulatory Law at the Getúlio Vargas Foundation (FGV/RJ). Fernando defended his thesis “The creation of anticompetitive effects by the LGPD to microenterprises and small business”before a committee formed by his supervisor, professor Dr. Luca Belli (FGV/RJ), and professors Dr. […]

Brazilian DPA publishes a Guideline on the Legitimate Interest

On February 02, 2024, the Brazilian Data Protection Authority (“Brazilian DPA” or “ANPD”) published a Guideline on the use of legitimate interest as a legal basis for personal data processing (“Guideline”). The Guideline provide definitions and parameters for interpreting the legitimate interest in the processing of personal data, as well as establish the balancing test […]