ANPD sanctions another public body

Summary:

The Autoridade Nacional de Proteu00e7u00e3o de Dados (ANPD) has imposed sanctions on the Secretaria de Sau00fade do Estado de Santa Catarina (SES-SC) for violating the Lei Geral de Proteu00e7u00e3o de Dados Pessoais (LGPD) and the Regulamento de Fiscalizau00e7u00e3o. The violations include:

Negligence in securing data storage and treatment systems, affecting millions of residents of Santa Catarina (Article 49 of LGPD)
Failing to communicate clearly, adequately, and in a timely manner about a security incident that compromised the personal data of approximately 300,000 individuals (Article 48 of LGPD)
* Failing to provide the required Relatu00f3rio de Impacto de Proteu00e7u00e3o de Dados Pessoais (RIPD) and other information requested by the ANPD (Article 38 of LGPD and Article 5 of the Regulamento de Fiscalizau00e7u00e3o)

The SES-SC was sanctioned with four warnings and must take corrective actions, including maintaining an incident report on its website and informing directly the affected individuals. The SES-SC has 10 days to appeal the decision.