Law No. 20.396 of 2019, biometric identification and image monitoring at football stadiums
Lei nº 20.396, de 3 de janeiro de 2019
In force since .
A biometric privacy rule binding public and private bodies.
- Obligation class
- Biometric, Retention
- Audit expectation
- none
As of .
What it requires
- This is a Goiás state law on football stadiums with a capacity above 10,000 people, and its duties run on days of football matches.
- Use a biometric identification system at the entrances and an image-monitoring system over the whole common-use area (art. 1).
- Through the biometric system, build a database of people with a history of violence in and around stadiums, and cross it in real time with the databases that security bodies make available, such as those of people barred from the vicinity of stadiums, fugitives, arrest warrants and members of organized supporter groups (art. 2).
- Keep the information in that database for at least five years, under the stadium owner's responsibility, and make it available to the state security bodies, the Judiciary and the Public Prosecutor's Office on request (art. 2, § 1).
- Do not share or use the database for any purpose other than those the Law provides (art. 2, § 3).
- Refuse entry to a person convicted by a final judgment of violence inside or around stadiums (art. 3).
- Pay for the equipment and software needed to carry out the Law from the stadium owners' budget appropriations (art. 4).
These lines are LexLint's reading of the law's text, as of .
What it makes you log
Logging duty
The Law requires a database of identified people to be kept for at least five years and cross-checked with other databases, and it requires no log of access to that database or of the system's use.
- Kind
- None
- As of
What this law does
A biometric identification system at the entrances and an image-monitoring system over the whole common-use area are mandatory in football stadiums with a capacity above 10,000 people in Goiás on days of football matches.
The biometric system is used to build a database of people with a history of violence in and around stadiums and to cross it in real time with databases made available by security bodies, such as those of people barred from the vicinity of stadiums, fugitives, arrest warrants, members of organized supporter groups and other databases of public security bodies and the Judiciary.
The information in the database must be kept for at least five years, under the responsibility of the stadium owner, and made available to the state security bodies, the Judiciary and the Public Prosecutor's Office on request. Sharing or using the database for any purpose other than those the Law provides is forbidden. Entry to a football stadium is forbidden to a person convicted by a final judgment of violence inside or around stadiums.
The cost of acquiring, installing and maintaining the equipment and software falls on the budget appropriations of the stadium owners.
When LexLint raises it
When your app profile says your app processes biometric data or processes personal data.