Cybersecurity & Data Privacy | Government Relations
On December 20, 2019, some new changes to the Brazilian General Data Protection Law (Law No. 13,853/2019 - LGPD) came into force. The changes refer to the administrative sanctions applicable to data processing agents in violation of the rules provided in the LGPD.
Accordingly, the following administrative sanctions are now provided in the LGPD: (i) partial suspension of the operation of the database for a period of six (6) months, extendable for the same period, until regularization by the controller; (ii) suspension of the processing of personal data for a period of six (6) months, extendable for an additional equal period; and (iii) partial or total prohibition of the exercise of activities related to data processing.
The sanctions above can only be applied after at least one of the following sanctions has already been imposed to the breaching agent: single fine, daily fine, making the violation public; restriction on personal data and deletion of personal data.
Our team is at your disposal to advise you in case you have any questions on the above.