Brazil bill proposes to amend the LGPD and increase monetary penalties for violations – Technologist
If the text of PL 4530/23 is approved, the fine for LGPD violations will increase from up to 2% of a company’s revenue to up to 20%, and the maximum fine amount will go up from R$ 50,000,000 (fifty million Brazilian Reais) to R$ 100,000,000 (one hundred million Brazilian Reais) per violation.
PL 4530/23’s text would also provide consumers more control over their data. It proposes to include a provision in the Consumer Defense Code that commercial and service establishments may not require data subjects to provide their personal data or sensitive personal data without first clarifying to the data subjects, in a clear and adequate manner, the purpose and type of processing that will be implemented with respect to such personal data. Also with regards to amending the Consumer Defense Code, PL 4530/23 would make it compulsory to display notices, in an easy-to-read size and in a location where it can be easily seen, including the words “IT IS FORBIDDEN TO DEMAND PERSONAL DATA, SENSITIVE OR NOT, without clearly and adequately informing the consumer about the type of processing that will be carried out on them”.
It is likely that PL 4530/23 will be amended by members of the Senate and House of Representatives before being presented to Brazil’s President for approval. Regardless of any changes to the original text, PL 4530/23 should maintain its objective, i.e. increase transparency in data processing, send a message to businesses that personal data processing must be taken seriously, and, finally, prevent abuses in the use and marketing of sensitive personal data. Meanwhile, companies that process personal data should assess their data processing practices to ensure compliance not only with LGPD but also with industry-specific data protection regulations.
Authored by Isabel da Costa Carvalho and Julio Cesar de Oliveira Alves.
*Hogan Lovells is registered and licensed as a foreign legal consultancy with the Brazilian Bar Association. In accordance with Brazilian Bar Association rules, Hogan Lovells does not practice Brazilian law and the discussion above regarding Brazilian laws, rules and/or regulations has been obtained from publicly-available sources and is for informational purposes only. The discussion above is limited by the nature of our practice in Brazil and is solely derived from publicly-available information. The information contained herein should not to be construed as legal advice or otherwise be a substitute for advice provided by practitioners licensed to practice Brazilian law.