Brazil’s Official Gazette published today details of the first administrative sanctions that have been applied to a company by the country’s National Data Protection Authority’s (Autoridade Nacional de Proteção de Dados/ANPD) through its General Coordination for Inspection (Coordenação-Geral de Fiscalização).
The micro-company suffered the following sanctions: (i) a warning, as a result of violation of an LGPD provision stating that a Person in Charge of Personal Data Processing (Encarregado pelo Tratamento de Dados Pessoais) must be indicated; and (ii) fines adding up to BRL 14,400.00 — one BRL 7,200.00 fine due to violation of LGPD provisions providing legal hypotheses for the processing of personal data, and another concerning violation of the provisions of the ANPD Inspection Regulation (Regulamento de Fiscalização) that obliges regulated agents to submit to ANPD inspection, also a BRL 7,200.00 fine.
This decision can still be appealed.
Check out the full order at: