Atualização da NR-1 do MTE - muito além de uma obrigação: boas práticas de gestão de riscos ocupacionais demonstram boa-fé para com os stakeholders[1] vinculados à empresa e permitem que esta se destaque no mercado competitivo por sua governança em conformidade com os preceitos normativos. A Norma Regulamentadora nº 1 (NR) é uma norma do Ministério do […]
CPDMA BLOG
Category: Articles
Date: 14 de December de 2023
Posted by: CPDMA Team
The first sanctions applied by the National Agency for the Protection of Personal Data (ANPD) were a wake-up call for companies: the LGPD is a serious law and must be complied with.
The General Personal Data Protection Law - Law no. 13.709/18 (LGPD) was published in 2018 and came into force in 2020. This deadline was given to public and private legal entities (processing agents) that collect, store or process personal data of individuals, in Brazil or abroad, to comply with the new regulations.
Initially, sanctions and administrative fines were imposed by consumer protection agencies (PROCON), the Public Prosecutor's Office, as well as labor and civil lawsuits, until the National Data Protection Authority (ANPD) began its inspection activities in 2021.
At first, the ANPD worked to raise awareness and educate data processors about the importance of applying good practices in the processing of personal data, in the pursuit of the fundamental right to informational self-determination (EC No. 115/22).
The personal data protection system was put into effect when the first administrative sanctions were applied by the regulatory agency.
The first company fined is a provider of telephony services, such as telemarketing and self-service via the messaging service WhatsApp. Because it is a micro-enterprise, the amount for each infraction was limited to 2% of its gross revenue, totaling R$7,200.00 per infraction.
The company was fined for failing to appoint the person responsible for processing personal data, as required by art. 41 of the LGPD, and for processing personal data without a legal basis: the company processed voters' personal data for the purposes of an election campaign, without the express consent of the data subjects, as required by art. 7, II, of the LGPD.
The Santa Catarina State Health Department (SES-SC) was the second public company to receive sanctions from the ANPD. Four warning sanctions were imposed for leaking personal data.
SES-SC infringed art. 49 of the General Personal Data Protection Act (LGPD) by neglecting the security of systems for storing and processing personal data, and by the lack of clarity, inadequacy and timeliness of the notice to data subjects, which was considered an infringement of art. 48 of the LGPD. In addition, the agency failed to submit the Personal Data Protection Impact Report (RIPD) requested by the Authority.
It should be noted that the sanctions imposed on companies are attributed to the lack of proper documents and procedures.
Thus, contractual compliance and the creation of standardized documents, without the implementation of effective practices, are not enough to guarantee compliance with the law and avoid sanctions.
The application of sanctions by the ANPD is an important instrument for the protection of personal data in Brazil. Companies must be vigilant in complying with the legislation to avoid the risk of administrative sanctions.
Civil Law | CPDMA Team
Recent posts
Assessment of Entitlements in Partial Dissolution of a Company: Legal and Practical Aspects
Read more
The dissolution of a company is a highly relevant topic in Corporate Law. Whether total or partial, the withdrawal, exclusion, or death of a partner can generate conflicts among those involved, especially regarding the assessment of entitlements to be paid to the withdrawing or excluded partner or their successors. The Civil Code provides general guidelines […]
The Full Bench of the Superior Labor Court (TST) established 21 binding theses on Monday (02/24), consolidating itself as a Court of Precedents.
Read more
Como forma de pacificação da jurisprudência consolidada junto aos Colegiados do TST, as teses firmadas deverão ser observadas pelos Tribunais Regionais do Trabalho. Nesta toada, a Resolução 224/2024 acrescentou dispositivos na IN 40/2016 do TST, prevendo o cabimento de Agravo Interno contra decisões dos Tribunais Regionais do Trabalho que negarem seguimento a Recurso de Revista nos casos em que o […]
STJ and the Validity of the Discount for Labor Creditors: Our Role in the Concreserv Case
Read more
The Superior Court of Justice (STJ) has begun the trial of a crucial issue for business law and judicial recovery in Brazil: the possibility of applying a discount on labor claims and creating subclasses within this category. The case under review involves the judicial recovery of the company Concreserv, which established a 90% discount on amounts exceeding 25 […]
Salary Transparency Report – Submission Deadline until February 28, 2025
Read more
Companies with 100 or more employees can now submit information for the Salary Transparency Report from February 3 to February 28, 2025, through the Emprega Brasil portal, in the employers' section. On the portal, companies must report whether they have a job and salary plan or a career plan, policies to encourage the hiring of women (such as Black women, women with disabilities, victims of violence, heads of households, and LGBTQIA+), actions to promote women to management and leadership positions, programs to support the sharing of family responsibilities, as well as the salary criteria for career progression.
Commercial Registries Now Require Publications of Corporate Acts: Understand the Changes
Read more
In recent months, several Commercial Registries in Brazil have begun requiring the publication of acts related to mergers, spin-offs, and incorporations of companies, as established in the Civil Code (Articles 1,122 and 1,152, §1) and the Corporate Law (Articles 227, §3, 228, §3, and 229, §4). Although these obligations were already stipulated by law, many […]
English 
Português do Brasil 
Español