{"id":507,"date":"2023-08-17T12:25:00","date_gmt":"2023-08-17T15:25:00","guid":{"rendered":"https:\/\/luchesiadv.com.br\/?p=507"},"modified":"2024-09-06T23:41:15","modified_gmt":"2024-09-07T02:41:15","slug":"5-anos-de-lgpd-nossa-socia-dra-ellen-carolina-especialista-em-lgpd-ponta-desafios-dos-proximos-anos","status":"publish","type":"post","link":"https:\/\/luchesiadv.com.br\/en\/5-anos-de-lgpd-nossa-socia-dra-ellen-carolina-especialista-em-lgpd-ponta-desafios-dos-proximos-anos\/","title":{"rendered":"5 years of LGPD: Our partner, Dr. Ellen Carolina, an expert in LGPD, highlights the challenges of the coming years"},"content":{"rendered":"

Members of the CNPD, sector entities, research organizations and experts indicate the achievements resulting from the LGPD and point out which topics are priorities in the near future.<\/em><\/p>\n\n\n\n


In its 5 years of existence, the General Data Protection Law (LGPD) has faced setbacks and uncertainties, but has consolidated itself as an important tool for a society based on the digitalization of the economy. The path has been tortuous since its sanction in 2018, under the Michel Temer government, which took place after much negotiation. In the following government, uncertainties arose regarding the viability of the National Data Protection Authority (ANPD),\u00a0as director Miriam Wimmer pointed out.<\/a><\/p>\n\n\n\n


But the authority was no longer just a matter of paper and the body was given the autonomy of a special agency. It approved essential regulations to begin monitoring abuses related to data privacy and fined a company in the first half of this year, 33 months after it was created.<\/p>\n\n\n\n


In this second text about the five years of the LGPD, Tele.S\u00edntese gathered opinions from entities, activists and members of the National Council for Data Protection and Privacy (CNPD), an advisory body of the ANPD, regarding the achievements made in relation to the law and what the future challenges will be. Check it out:<\/p>\n\n\n\n


Fabricio da Mota Alves, partner at Serur Advogados and member of the CNPD<\/strong><\/p>\n\n\n\n


Achievements:\u00a0\u201cDue to legal liability, organizations have been undergoing internal transformations, reviewing operational flows and IT systems, creating a new role to house the work of the Data Protection Officer with a view to avoiding liability, but also to incorporating new corporate values of respect for the data subject. Data protection is no longer seen as just a technical issue but has become a strategic priority.\u201d<\/em><\/p>\n\n\n\n


Challenges:\u00a0\u201cThe most critical point in the application of data protection in Brazil is its implementation by a regulator that is qualified in terms of both its management team and civil servants (especially in regulatory areas), in addition to having sufficient numbers to meet the challenge. Budgetary allocation, autonomy and administrative structure help in this regard, but effectiveness is needed beyond the legal provision.\u201d<\/em><\/p>\n\n\n\n


Patr\u00edcia Peck, from Peck Advogados and member of the CNPD<\/strong><\/p>\n\n\n\n


Conquest:\u00a0\u201cThe main advance was having achieved legislation that achieved its governance by having its own, independent National Data Protection Authority, which became a special agency and is fully operational. It managed to publish the rules of the sanctioning process to effectively monitor data processing agents and has already started applying fines.\u201d<\/em><\/p>\n\n\n\n


Challenges:\u00a0\u201cWhat we still have a big gap in is the cultural pillar. We still need to carry out a national awareness campaign. Most countries that have implemented legislation like this have carried out an educational campaign for the population. This is still a pending issue for the ANPD and a requirement that the legislation brought that must be carried out by data processing agents. So it is a joint effort between public and private institutions to ensure a change in culture and make us see that the LGPD is part of Brazilians\u2019 daily lives.\u201d\u00a0<\/em><\/p>\n\n\n\n


Conexis Brasil Digital<\/strong><\/p>\n\n\n\n


Achievements:\u00a0\u201cIn a context in which the telecommunications sector registers approximately 340 million accesses, the protection of user data becomes even more crucial. With the 5-year milestone of the General Data Protection Law (LGPD), Conexis Brasil Digital highlights the progress achieved throughout this period, including the launch of the Code of Good Data Protection Practices for the Telecommunications Sector. This code, created with the purpose of guiding telecommunications companies in the application of the LGPD, reflects the sector's firm commitment to ensuring the privacy and protection of individuals' personal data.\u201d<\/em><\/p>\n\n\n\n


Maria Tereza Pelicano David, DPO at Claro<\/strong><\/p>\n\n\n\n


Achievements:\u00a0\u201cThere has been significant progress in Brazilian society with regard to the importance of treating personal data responsibly, transparently, appropriately and securely. The Law has brought greater clarity regarding the rights and duties of both data subjects and companies that process data for a variety of purposes.\u201d<\/em><\/p>\n\n\n\n


Challenges:\u00a0\u201cThe ANPD has been working hard on important issues, but there are still many relevant points on the regulatory agenda that, when defined, will impact decisions already made by companies, accelerated by digitalization and technological advances. The collection of biometrics, for example, is a fundamental safeguard for the security of the holder and an important mechanism for preventing fraud, especially in a primarily digital environment such as telecommunications.\u201d<\/em><\/p>\n\n\n\n


Sergio Sgobbi, director of institutional relations at Brasscom<\/strong><\/p>\n\n\n\n


Conquest:\u00a0\u201cData protection was included in the list of fundamental rights and guarantees of Brazilians.\u201d<\/em><\/p>\n\n\n\n


Challenge:\u00a0\u201cIt is still necessary to seek the acculturation that data protection is a perennial and relevant issue for business. Data protection is still seen as an obligation, a burden for many companies, when the vision should be to benefit from the effects generated by respect for privacy and see this as a way to leverage opportunities based on the proper adaptation of the business to the legislation\u201d.<\/em><\/p>\n\n\n\n


Fabro Steibel, Executive Director of ITS Rio<\/strong><\/p>\n\n\n\n


Achievements:\u00a0\u201cI would like to highlight the creation of the Council (CNPD). Personal data is a matter of processes, not compliance. All the consultations conducted show that it is clear that a multisectoral approach is necessary, especially regarding an umbrella issue that applies to all areas. The formation of the council took time, it took a long time, but it is a group of experts who participated in several stages of public policies, such as respect for the privacy of children and adolescents.\u201d\u00a0<\/em><\/p>\n\n\n\n


Challenges:\u00a0\u201cThe current regulations give a lot of power to the president of the CNPD and little to the council. But these are issues that must be addressed in future administrations. The agility of the CNPD consultation process is another challenge. The creation of working groups is a good alternative, but it is still necessary to better connect the ANPD\u2019s agenda with the Council\u2019s agenda, to prevent one party from deciding and the other from giving opinions on different matters. Another challenge is data interoperability, which implies generating value for the data and protecting the issue of personal data.\u201d<\/em><\/p>\n\n\n\n


Rafael Zanatta, Director of the Data Privacy Brazil Research Association<\/strong><\/p>\n\n\n\n


Achievements:\u00a0\u201cThe creation of the ANPD, which occurred after a two-year legal impasse, with the law expecting a vacatio legis of one and a half years. The possibility of selecting staff and requesting servers brought a base of expertise from ANAC, ANATEL, and MCTIC. The emergence of a broad personal data protection community in Brazil, with thousands of professionals who know the principles of the LGPD and apply them in their daily lives.\u201d<\/em><\/p>\n\n\n\n


Challenges:\u00a0\u201cRegulate elements of the rights of data subjects in relation to the response deadline, the right to file a petition with the ANPD, and explain how automated review rights work. There is also the stabilization of the technical staff, training of staff and institutional strengthening of the ANPD, which will be increasingly in demand for issues related to childhood, artificial intelligence and platform regulation.\u201d<\/em><\/p>\n\n\n\n


Ellen Carolina Silva, Partner at Luchesi Advogados, member of the Brazilian Association of Precision and Digital Agriculture<\/strong><\/p>\n\n\n\n


Achievements:\u00a0\u201cThe regulation itself, whether by the ANPD, of legislative proposals aimed at amending the text of the LGPD, or to legislate on data protection in a complementary manner. I highlight Constitutional Amendment 115, approved in 2022, which enshrined the protection of personal data as an autonomous fundamental right in the Federal Constitution, in addition to having defined the exclusive competence of the Union to legislate on the subject. This point directly reflects on the application of the LGPD as it demonstrates the State's commitment to reinforcing the practical importance of the law and its impacts on the international market\u201d.<\/em><\/p>\n\n\n\n


Challenge:\u00a0\u201cAlthough the ANPD has made progress on some important regulatory issues, there is still a lack of regulation on essential points of the LGPD, such as the issue of international data transfer and the issue of requirements for reporting security incidents. Regulation of these issues is important to validate (or correct) what is already being practiced in the market.\u201d<\/em><\/p>\n\n\n\n


Adriana Rollo, member of the International Association for Artificial Intelligence<\/strong><\/p>\n\n\n\n


Achievements:\u00a0\u201cWe have reached a level of maturity and social awareness where bad data processing practices are no longer tolerated by people. We are seeing this with the spread of artificial intelligence tools, which ultimately use large amounts of data.\u201d<\/em><\/p>\n\n\n\n


Challenges:\u00a0\u201cThe ANPD has positioned itself in favor of regulating artificial intelligence and fostering innovation, as long as it is done responsibly. Last month, the ANPD published its preliminary analysis of Bill No. 2338\/23, which regulates the use of artificial intelligence. In it, it presents the points of convergence and conflict between the bill and the LGPD, and suggests that the ANPD should be the key authority in the regulation and governance of artificial intelligence in Brazil, especially with regard to the protection of personal data.\u201d<\/em><\/p>\n\n\n\n


Reproduction: Telesynthesis<\/p>","protected":false},"excerpt":{"rendered":"

Integrantes do CNPD, entidades setoriais, organiza\u00e7\u00f5es de pesquisa e especialistas indicam as conquistas resultantes da LGPD e apontam quais temas s\u00e3o priorit\u00e1rios no futuro pr\u00f3ximo. Em 5 anos de exist\u00eancia, a Lei Geral de Prote\u00e7\u00e3o de Dados (LGPD) atravessou percal\u00e7os, incertezas, mas consolidou-se como ferramenta importante para uma sociedade baseada na digitaliza\u00e7\u00e3o da economia. O […]<\/p>\n","protected":false},"author":1,"featured_media":612,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","footnotes":""},"categories":[11],"tags":[],"class_list":["post-507","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lgpd"],"acf":[],"_links":{"self":[{"href":"https:\/\/luchesiadv.com.br\/en\/wp-json\/wp\/v2\/posts\/507","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/luchesiadv.com.br\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/luchesiadv.com.br\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/luchesiadv.com.br\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/luchesiadv.com.br\/en\/wp-json\/wp\/v2\/comments?post=507"}],"version-history":[{"count":0,"href":"https:\/\/luchesiadv.com.br\/en\/wp-json\/wp\/v2\/posts\/507\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/luchesiadv.com.br\/en\/wp-json\/wp\/v2\/media\/612"}],"wp:attachment":[{"href":"https:\/\/luchesiadv.com.br\/en\/wp-json\/wp\/v2\/media?parent=507"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/luchesiadv.com.br\/en\/wp-json\/wp\/v2\/categories?post=507"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/luchesiadv.com.br\/en\/wp-json\/wp\/v2\/tags?post=507"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}