Brazilian Data Protection Authority publishes its 2023-2024 Regulatory Agenda
On November 8, 2022, the Brazilian Data Protection Authority (“Authority”) published its 2023-2024 Regulatory Agenda (“Current Agenda”), establishing high-priority topics over the next two years. The Agenda reflects societal input received during this year, as well as topics deemed important for study and/or regulation.
Unlike the 2021-2022 Agenda (“Past Agenda”), the Current Agenda’s initiatives are divided into 4 (four) phases, in order of priority:
- Phase 1: Matters for which the regulatory process (“Process”) began during the Past Agenda;
- Phase 2: Matters for which the Process will begin within 1 year;
- Phase 3: Matters for which the Process will begin within eighteen months; and
- Phase 4: Matters for which the Process will begin within 2 years.
Following public hearings held in August 2022, the Authority categorized the following matters as most relevant:
- Regulation of dosimetry and application of administrative sanctions;
- Data subjects’ rights;
- Communication of incidents and specification of the notification deadline;
- International transfer of personal data;
- Data Protection Impact Assessment;
- Data Protection Officer;
- Legal basis for processing personal data;
- Definition of high-risk and large-scale;
- Sensitive data regarding religious organizations;
- Use of personal data for academic purposes and for studies by research organizations;
- Anonymization and Pseudonymization;
- Regulation of the provisions of art. 62 of the Brazilian General Personal Data Protection Law;
- Data sharing by public authorities;
- Processing minors’ data;
- Guidelines for the National Policy on Personal Data Protection and Privacy;
- Regulation of criteria for recognizing and disclosing rules on good practices and governance;
- Sensitive data regarding biometric data;
- Security, technical and administrative measures;
- Artificial Intelligence; and
- The Conduct Adjustment Agreement.
As compared to the Past Agenda’s ten topics, the Current Agenda covers many more initiatives.
With publication of the Current Agenda, the Authority will assume the task of completing work already begun, while embarking on new topics.
Dosimetry regulation and administrative penalties stand out among matters noted, having been the subject of public hearings in August and September 2022. Regulations on both topics are currently in their final stages of preparation.
Inclusion of matters such as biometric data and artificial intelligence also demonstrates the importance of personal data-related issues in the digital environment. Thus, publication of the Current Agenda evidences the Authority’s commitment to providing information, while also promoting legal certainty in the relationship with regulated agents.
Our Digital Law team continues to follow all related developments and may be reached at firstname.lastname@example.org.
Last related news
January 17, 2023
The Future Legal Regulation Of Artificial Intelligence In Brazil
Several Bills are being debated in the Brazilian National Congress with the objective of regulating the development and use of artificial intelligence … The Future Legal Regulation Of Artificial Intelligence In Brazil
January 9, 2023
New flexibility on the remittance of royalty payments abroad
In the last days of December 2022, new regulations entered into force easing up the remittance of royalty payments abroad. However, local … New flexibility on the remittance of royalty payments abroad
January 6, 2023
Analysis Of Evidence Of Use Became More Thorough In The Forfeiture Procedure
On December 28, 2022, the Brazilian PTO published Technical Note no. 03.2022, updating the procedures for exam of forfeiture requests, originally regulated … Analysis Of Evidence Of Use Became More Thorough In The Forfeiture Procedure