Cesar Peres Dulac Müller logo


Date: 14 de December de 2023
Posted by: CPDMA Team

The first sanctions applied by the National Agency for the Protection of Personal Data (ANPD) were a wake-up call for companies: the LGPD is a serious law and must be complied with.

Artigo de Juliana Bloise sobre a LGPD.

The General Personal Data Protection Law - Law no. 13.709/18 (LGPD) was published in 2018 and came into force in 2020. This deadline was given to public and private legal entities (processing agents) that collect, store or process personal data of individuals, in Brazil or abroad, to comply with the new regulations.

Initially, sanctions and administrative fines were imposed by consumer protection agencies (PROCON), the Public Prosecutor's Office, as well as labor and civil lawsuits, until the National Data Protection Authority (ANPD) began its inspection activities in 2021.

At first, the ANPD worked to raise awareness and educate data processors about the importance of applying good practices in the processing of personal data, in the pursuit of the fundamental right to informational self-determination (EC No. 115/22).

The personal data protection system was put into effect when the first administrative sanctions were applied by the regulatory agency.

The first company fined is a provider of telephony services, such as telemarketing and self-service via the messaging service WhatsApp. Because it is a micro-enterprise, the amount for each infraction was limited to 2% of its gross revenue, totaling R$7,200.00 per infraction.

The company was fined for failing to appoint the person responsible for processing personal data, as required by art. 41 of the LGPD, and for processing personal data without a legal basis: the company processed voters' personal data for the purposes of an election campaign, without the express consent of the data subjects, as required by art. 7, II, of the LGPD.

The Santa Catarina State Health Department (SES-SC) was the second public company to receive sanctions from the ANPD. Four warning sanctions were imposed for leaking personal data.

SES-SC infringed art. 49 of the General Personal Data Protection Act (LGPD) by neglecting the security of systems for storing and processing personal data, and by the lack of clarity, inadequacy and timeliness of the notice to data subjects, which was considered an infringement of art. 48 of the LGPD. In addition, the agency failed to submit the Personal Data Protection Impact Report (RIPD) requested by the Authority.

It should be noted that the sanctions imposed on companies are attributed to the lack of proper documents and procedures.

Thus, contractual compliance and the creation of standardized documents, without the implementation of effective practices, are not enough to guarantee compliance with the law and avoid sanctions.

The application of sanctions by the ANPD is an important instrument for the protection of personal data in Brazil. Companies must be vigilant in complying with the legislation to avoid the risk of administrative sanctions.

By: Juliana Bloise

Civil Law | CPDMA Team


Recent posts

Discover the asset class - INDUSTRIAL DESIGN

In our series of posts explaining the differences between classes of intellectual assets, today we're going to look at INDUSTRIAL DESIGN. Industrial Design is the ornamental plastic form of an object - for example, the design of a product or the set of lines applied to a product, such as a print - that gives it [...]

Read more
Learn about the asset class - PATENTS

A PATENT is a title of ownership granted by the State over an unpublished invention (invention patent) or one derived from an existing one (utility model patent). The application for registration is made to the INPI, granting the holder the right to prevent third parties from manufacturing, using or offering for sale [...].

Read more
Corporate name: get to know this asset class

Continuing with our series of posts explaining the differences between the classes of intellectual assets, today we'll look at the BUSINESS NAME. Although trademarks - the nature of which has already been described in the previous post - can sometimes be confused with business names, they are distinct legal institutes. The business name identifies the company by [...]

Read more
PERSE: legislative changes in the emergency program to revive the events sector

Law No. 14,859/2024: amendment of the Perse rules for the period 2024 to 2026. The Emergency Program for the Resumption of the Events Sector - Perse was created in 2021 with a view to helping companies linked to the events sector - the activity most affected by the COVID-19 pandemic, by reducing [...]

Read more
The extent of insurance cover in floods

The rains that have hit Rio Grande do Sul in recent weeks have destroyed farms, properties and vehicles. Even if they have insurance, car or property owners should check the coverage of their policies to see if they can get compensation. Basic insurance for cars and properties does not usually cover floods. Insurance against electrical breakdown, [...]

Read more
The agreement to sell the most famous slimming drug of the moment

It was recently reported that the Brazilian company BIOMM has signed an agreement with the pharmaceutical industry BIOCON to distribute in Brazil a drug similar to Ozempic, indicated for the treatment of diabetes, but used mainly to treat obesity. However, this will only be possible because the patent holder of the drug has certainly authorized, through a [...]

Read more
linkedin Facebook pinterest youtube lol twitter Instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter Instagram