By Aline Junqueira Zinni
Brazilian Data Protection Authority approves its Surveillance and Sanctioning Procedures
Data protection has been a hot topic in Brazil. Recently, the National Congress approved the Constitutional Amendment no. 17/19, which turned data protection into a fundamental right and granted the Federal Union exclusive competence to regulate about the subject. However, the Brazilian Data Protection Authority (ANPD) is the one that has been proactive.
Last Friday (October 29), the Directing Council of the Data Protection Authority issued Regulation CD/ANPD no. 1/2021. It approves ANPD’s Surveillance Process and the Administrative Sanctioning Procedure.
According to the Regulation, the surveillance activities comprehend monitoring, orientation, and prevention, demonstrating the ANPD’s intention to adopt an educative and orientational positioning. The sanctioning procedure will examine infringements to the data protection regulation in Brazil and apply the suitable penalties (according to Section 52 of the Brazilian Data Protection Regulation – Law no. 13,709/2018).
It is important to highlight that the Regulation is mostly focused on the surveillance process, ensuring data processors a more amicable approach with ANPD. The sanctioning procedure confirms the legal defense and adversarial principle, as well as sets forth similar provisions to the Brazilian Civil Procedure Code (e.g. deadlines in business days and summoning rules).
Another interesting subject brought by the Regulation is the so-called “monitoring cycle”, that aims at analyzing the compliance with the data protection rules by the processing agents and preventing uncompliant practices. The first cycle of monitoring will occur as of January 2022.
Our Digital Team is monitoring the adoption of new measures and publishing of documents by the ANPD. If you need further details, we are available at email@example.com.
Last by Aline Junqueira Zinni
November 14, 2022
Brazilian Data Protection Authority publishes its 2023-2024 Regulatory Agenda
On November 8, 2022, the Brazilian Data Protection Authority (“Authority”) published its 2023-2024 Regulatory Agenda (“Current Agenda”), establishing high-priority topics over the … Brazilian Data Protection Authority publishes its 2023-2024 Regulatory Agenda
June 21, 2022
Provisional Measure Transforms the Brazilian Data Protection Authority into an Independent Entity
Provisional Measure 1,124/22 published this past June 14, 2022, transformed the Brazilian Data Protection Authority into a special nature entity. The Measure is … Provisional Measure Transforms the Brazilian Data Protection Authority into an Independent Entity
February 11, 2022
Data Protection becomes a fundamental right in Brazil
Yesterday (Feb. 10, 2022), the Brazilian Senate approved the Constitutional Amendment no. 115/2022, originated in the Proposal for Constitutional Amendment no. 17/2019, … Data Protection becomes a fundamental right in Brazil