News

Newsletter

Brazilian Data Protection Authority issues its first official fine after almost three years in force

Brazilian Data Protection Authority (ANPD) applied, on July 6th, the first sanction for non-compliance with the Brazilian General Data Protection Law (LGPD). According to the order the sanctions imposed were a warning and a simple fine, applied to a small telemarketing company.

Based on the information released by ANPD, the process was initiated in March 2022 to investigate (i) the absence of a legal hypothesis for the processing of personal data, (ii) the lack of a record of operations, (iii) the failure to submit a Data Protection Impact Assessment (DPIA), (iv) the failure to appoint a Data Protection Officer (DPO), and (v) the non-compliance with the authority´s requests.

As stated in the order, the sanctions have been classified into:

  1. Warning, without imposition of corrective measures, for the absence to appoint a DPO (violation of Article 41 of the LGPD); and
  2. Simple fine, in the amount of R$ 7,200, for the absence of a legal basis for the processing of personal data (violation of Article 7 of the LGPD), and in the amount of R$ 7,200, for failure to provide documents and support for the Authority’s inspection activities (violation of Article 5 of the Inspection Regulation), totaling R$ 14,400.

Since this is the first decision by the Authority in such case, the company may appeal.

The specific criteria for the monetary quantification of the sanctions were not disclosed, however, it is understood that the symbolic amount – considering that the LGPD provides fines of up to fifty million reais – are related to the revenue of the company, which according to the Brazilian Legislation is classified as a small company.

This decision was important to demonstrate that not only companies with a larger size are subject to the ANPD´s applications, meaning that all companies should handle the personal data protection matters with utmost care and responsibility.

If you wish to obtain more information on this matter, we are available at digital@kasznarleonardos.com.

Back

Last related news

June 7, 2024

BRPTO Publishes Integrity Plan for 2024-2025

On Tuesday, June 4, 2024, the Brazilian Patent and Trademark Office (”INPI”) published its Integrity Plan, outlining actions to manage integrity risks BRPTO Publishes Integrity Plan for 2024-2025

Ler notícia

May 29, 2024

New Regulation Approved by Anvisa Simplifies the Registration Process for Biosimilar Medicines

Anvisa approved the new simplified regulation for the registration of biosimilar medicines, whose publication in the Official Gazette (DOU) is still awaited. New Regulation Approved by Anvisa Simplifies the Registration Process for Biosimilar Medicines

Ler notícia

May 27, 2024

New Rules and Conditions for Obtaining Authorization for the Commercial Exploration of Sports Betting

On May 22, 2024, the Secretariat of Prizes and Bets of the Ministry of Finance (SPA/MF) published Ordinance No. 827/2024, which regulates New Rules and Conditions for Obtaining Authorization for the Commercial Exploration of Sports Betting

Ler notícia
plugins premium WordPress