Is a listed company, in Brazil

Lei nº 13.709, de 2018 (LGPD), arts. 42-45, 52-54, 55-A a 58-B (civil liability, administrative sanctions and the ANPD) · Read the law's page

• Expect administrative sanctions, including a simple fine of up to 2% of the private legal entity's, group's, or conglomerate's revenue in Brazil in its last fiscal year, excluding taxes, capped in total at R$50,000,000.00 per infraction, for violations the ANPD investigates through due administrative process.
• As a controller or operator, repair patrimonial, moral, individual, or collective damage you cause a person by processing personal data in violation of the data-protection legislation, and expect a court to shift the burden of proof to you where the data subject's allegation is plausible.
• Expect the ANPD to require information from you at any time, to receive and act on data-subject complaints, and to inspect and sanction noncompliant processing through a process that guarantees your defense and right of appeal.
• Comply with an ANPD warning's corrective-measures deadline before facing escalation to a fine, publicity of the infraction, blocking or deletion of the data involved, or suspension of the processing activity.