03/10/2024
On September 26, 2024, the National Data Protection Authority (ANPD) significantly updated its webpage section on data protection oversight and monitoring tasks for Brasil, reaffirming its commitment to the effective implementation of the General Data Protection Law (LGPD).
According to the Authority, the initiative embodies the core principles of responsive regulation: cooperation, efficiency, rationality, proportionality, and transparency. It invites data processing agents (Controllers and Processors) to adopt good practices and governance measures in data protection.
As the new ANDP oversight section states, sanctions will be applied proportionally to the resistance of the regulated entity in accepting ANPD’s actions.
The ANPD developed the updates to facilitate access to critical information regarding monitoring and sanctioning processes, and information security incidents. The primary goal is to provide clear and objective guidance to both public and data processing agents.
The new interface elucidates the surveillance process, clearly outlining the ANPD’s role in overseeing personal data processing activities and detailing each step, from the initial complaint/filling to the final analysis.
Key Highlights from the Supervision Webpage:
>> 18 Surveillance Processes by the ANPD in Progress;
>> 3 Administrative Sanctioning Processes by the ANPD in Progress;
>> 152 Security Incident Reports received by the ANPD in 2024;
>> 14 most common types of incidents reported up to June 2024:
- Ransomware without data transfer
- Credential theft / Social engineering
- Unauthorized access to information systems
- Other non-cyber incident types
- Ransomware with data transfer and/or publication
- Improper disclosure of personal data
- Exploitation of vulnerabilities in information systems
- Data sharing/sending to the wrong recipient
- Unintentional publication of personal data
- Information system failure (software)
- Service Navigation (DoS)
- Equipment failure (hardware)
- Brute force credential violation
- Loss/theft of documents or electronic devices
In addition to the content enhancement, the webpage’s interface has been redesigned to provide a more intuitive and visually appealing experience for citizens, organizations and data processing agents. Simplified navigation and improved visual features aim to facilitate access to information and enhance user understanding of the ANPD’s regulatory activities.
To learn more, visit: Fiscalização — Autoridade Nacional de Proteção de Dados (www.gov.br)
Please contact our Privacy and Data Protection team for further information and assistance.
Co-authored by: Fabricio Polido , Denise de Araujo Berzin Reupke and Larissa Fernandes Ackerman.
