In ADC 91, filed by the Brazilian Association of Internet and Telecommunications Providers (Abrint), the Supremo Tribunal Federal (STF), the federal court that has the final say on constitutional matters, is considering how far public authorities may go in requesting data linked to IP addresses directly from providers in order to identify users. The case […]
On September 9, the ANPD opened a public consultation to receive contributions on the update of its Supervision and Administrative Sanctioning Procedure Regulation, established by Resolution CD/ANPD No. 1/2021. As part of the social participation stage, the Agency held an online public hearing on the matter on September 24, streamed on its YouTube channel. The […]
The sanction stems from an ANPD enforcement proceeding into TikTok’s processing of children’s and adolescents’ personal data. In 2024, Technical Note No. 50/2024/FIS/CGF/ANPD identified possible irregularities in two ways of accessing the platform: the “logged-out feed,” available without creating an account, and the feed for registered users. The review looked, among other issues, at the […]
On August 19, Leonardi Advogados attended the 3rd ANPD DPOs’ Meeting, held in Brasília. The event brought together representatives from the National Data Protection Agency (ANPD), the Federal Government, the private sector, academia, and civil society to discuss three agendas that are redefining the role of data protection officers: the use of generative artificial intelligence, […]
On August 14, 2026, France’s Constitutional Council struck down the central provision of the law that banned children under 15 from registering on social media, passed by Parliament on July 21. The Council had been petitioned in late July by opposition members of parliament, and concluded that the ban disproportionately infringes freedom of expression and […]
The AI Act (Regulation (EU) 2024/1689) stands as the first comprehensive legal framework on artificial intelligence, and its aim is to foster trustworthy AI in Europe, one that reconciles safety and fundamental rights with investment and innovation. Its application, however, is gradual: the regulation is organized into four levels of risk, unacceptable, high, limited (or […]
The new Radar Tecnológico, produced by the ANPD’s Technological Innovation Bureau (SITEC), stands out for focusing specifically on the phenomenon of deepfakes. In the study, deepfakes are defined as audio, images, and videos created or altered by artificial intelligence with a high degree of realism. The Radar also addresses the conceptual boundaries between deepfakes, cheapfakes, […]
The United States Supreme Court ruled, in Trump v. Slaughter, on June 29, 2026, that the Federal Trade Commission’s (FTC) independence from the President is unconstitutional. Although the ruling concerns the FTC’s independence, it has raised concern over its possible effects on the EU-US Data Privacy Framework (DPF), currently the main legal basis for transferring […]
Cases in which police authorities request geolocation data from service providers relating to the site of a crime are becoming increasingly common. In this type of investigation, the usual order is reversed: instead of starting from a suspect to verify where they were, investigators start from the crime scene and from who passed through it […]
The National Data Protection Agency (ANPD) has concluded the first phase of two monitoring processes assessing how public bodies and companies have been complying with two obligations set out in the LGPD: the formal appointment of an officer in charge of data processing and the provision of a communication channel accessible to data subjects. In […]
The National Data Protection Agency (ANPD) has opened an Administrative Sanctioning Proceeding against the Instituto Saúde e Cidadania (Isac), a social organization responsible for managing public health facilities in states such as Goiás, Rio Grande do Sul, Bahia, Alagoas, Piauí, and Tocantins. The case originated from a ransomware attack that occurred in 2025 and was […]
The Brazilian Data Protection Agency (ANPD) has initiated monitoring activities involving 18 pornographic content and escort services websites, representing approximately 98% of traffic within this segment in Brazil. According to ANPD’s Superintendent of Enforcement, Fabrício Guimarães, the initiative is “preventive, proportionate, and risk-based,” and aims to assess ongoing compliance plans while identifying potential gaps in […]