In this edition of the Cybernews, we highlight the major news that permeated the digital and data protection landscape in October 2024.
At the Superior Court of Justice (STJ), recent decisions reinforce the application of the Brazilian General Data Protection Law (LGPD in Portuguese) and the companies’ responsibility for protecting personal data.
The higher court underscored the need for proof of damage to grant compensation for data breaches, ensured the right to human review of automated decisions, held banks accountable for failures that facilitate fraud, and ruled that social media may be required to provide user data in specific cases. These precedents strengthen data protection in Brazil and safeguard the rights of data subjects.
Meanwhile, the Federal Supreme Court (STF) has been discussing the breach of data confidentiality for unidentified suspects in investigations of serious crimes. Justice Alexandre de Moraes voted in favor of the measure, sparking debates about the balance between privacy and public security.
Additionally, in the administrative sphere, the Federal Prosecution Office (MPF in Portuguese) has made advances in fostering a culture of personal data protection, achieving 66% compliance with the General Data Protection Law (LGPD). Initiatives such as creating governance committees and developing security incident response plans are some of the actions taken.