In a recent decision published on July 6, 2023, the Brazilian Data Protection Authority (“ANPD”) applied its first administrative sanction to a micro-enterprise for non-compliance with the provisions of Law No. 13,709/18, Brazilian General Data Protection Law (“LGPD”).

After the disclosure of the administrative sanctioning process and the conclusion of its instruction phase, the ANPD applied the administrative penalty due to non-compliance with the obligations set forth in the LGPD. In its decision dispatch, the ANPD presented the following justifications:

Thus, the total value of the penalties applied by the ANPD was fourteen thousand and four hundred reais (R$ 14,400.00). In the case that the microenterprise does not appeal the decision, a reduction of twenty-five percent (25%) in the total amount of the fine will be applied, according to the terms of articles 17 and 18 of the aforementioned Regulation.

The advancements in the activities of the ANPD demonstrate its commitment and diligence in safeguarding the rights and guarantees provided by the LGPD. Once again, it is emphasized the importance of processing agents adopting a proactive stance to ensure compliance with the law and mitigate potential penalties resulting from non-compliance with the obligations stated in the LGPD.

>> The alert was written by: Ana Carolina Cesar and Daniele Dimas.

For more details on this matter, please contact our Privacy and Data Protection team.

Leave a Reply

Your email address will not be published. Required fields are marked *