ANPD Monitoring Cycle Report published

News Data protection Portuguese Reports

Date: 18th Aug, 2023 Source: National Data Protection Authority Country: Brazil Original Source

Brief

Summary:

The Brazilian National Authority for Data Protection (ANPD) has published its first Monitoring Cycle Report (RCM) for 2022, evaluating the activities of the Coordination-General of Supervision (CGF). The report presents the main results of the fiscalization activities in 2022 and provides directions for the next cycle. The report summarizes the 1,045 requests received by ANPD, with the main sectors being digital platforms, finance, public services, telecommunications, and data aggregators. Additionally, 473 incidents of personal data breaches were reported, primarily caused by security failures in information systems (ransomware). The report serves as a tool for institutional action and transparency.

A Autoridade Nacional de ProteÃ§Ã£o de Dados (ANPD) divulgou hoje (18) o primeiro RelatÃ³rio de Ciclo de Monitoramento (RCM) da CoordenaÃ§Ã£o-Geral de FiscalizaÃ§Ã£o (CGF). O documento apresenta uma avaliaÃ§Ã£o das atividades fiscalizatÃ³rias de 2022, sintetizando os principais resultados da Ã¡rea. Traz, ainda, direcionamentos para o ciclo seguinte.Â

O RCM Ã© um instrumento de gestÃ£o e um mecanismo de transparÃªncia. Por meio do documento, a CGF comunica Ã sociedade o recebimento de requerimentos e comunicaÃ§Ãµes de incidentes de seguranÃ§a (CIS), bem como as medidas tomadas. O relatÃ³rio serve, ainda, como orientador das aÃ§Ãµes institucionais.Â

Os requerimentos sÃ£o a soma das denÃºncias de violaÃ§Ãµes Ã Lei Geral de ProteÃ§Ã£o de Dados Pessoais (LGPD) e das petiÃ§Ãµes de titulares (solicitaÃ§Ã£o de um titular de dados para exercer os seus direitos em relaÃ§Ã£o ao tratamento de dados pessoais). â€œDe acordo com o previsto na LGPD, a ANPD trata os requerimentos enviados pelos cidadÃ£os de forma agregada, para direcionarmos as nossas aÃ§Ãµes Ã s Ã¡reas que mais afetam os titulares de dadosâ€, explica Camila Romero, Chefe da DivisÃ£o de Monitoramento.Â

Ao longo de 2022, a Autoridade recebeu 1.045 requerimentos. Os setores que resultaram na maior quantidade de solicitaÃ§Ãµes foram plataformas digitais, finanÃ§as, pÃºblico, serviÃ§os, telecomunicaÃ§Ãµes e agregadores de dados. Com base nessas informaÃ§Ãµes, jÃ¡ foram instaurados, ao longo de 2022 e 2023, processos administrativos para analisar o tratamento de dados nesses segmentos.Â

JÃ¡ as comunicaÃ§Ãµes de incidentes de seguranÃ§a (CIS) sÃ£o uma obrigaÃ§Ã£o dos agentes de tratamento regulados pela LGPD, que devem informar Ã ANPD a ocorrÃªncia de evento adverso confirmado que comprometa a confidencialidade, integridade ou disponibilidade de dados pessoais, para que a ANPD faÃ§a anÃ¡lises e emita recomendaÃ§Ãµes.Â

Em 2022, a Autarquia recebeu 473 CIS. Prevaleceram casos de sequestro de dados provocados por falhas de seguranÃ§a em sistemas de informaÃ§Ã£o (ramsomware). AdministraÃ§Ã£o pÃºblica, saÃºde, educaÃ§Ã£o, finanÃ§as e tecnologia da informaÃ§Ã£o foram os principais setores que fizeram comunicaÃ§Ãµes Ã ANPD.Â

Acesse aqui o documento na Ãntegra.

Mais informaÃ§Ãµes:Â

Assessoria de ComunicaÃ§Ã£o ANPDÂ

Â ascom@anpd.gov.brÂ Â

Atendimento: 9h Ã s 17hÂ

Highlights content goes here...

Summary:

The Autoridade Nacional de Proteu00e7u00e3o de Dados (ANPD), the National Authority for Data Protection, has published its first Report on the Cycle of Monitoring (RCM) for the Coordination-General of Fiscalization (CGF). The report provides an evaluation of the fiscal monitoring activities in 2022, summarizing the main results and outlining directions for the next cycle.

The RCM is an instrument of management and a transparency mechanism that provides stakeholders with information on the reception of requests and notifications of security incidents (CIS), as well as the measures taken by the CGF. The report serves as an indicator for institutional actions and provides insights on the effectiveness of data protection measures.

In 2022, the ANPD received 1,045 requests, with the main areas of concern being digital platforms, finance, public services, telecommunications, and data aggregators. These findings have already led to the initiation of administrative processes to analyze data treatment in these sectors. Additionally, 473 CIS reports were submitted to the ANPD in 2022, with most cases involving data breaches caused by security failures in information systems (ransomware). Public administration, health, education, finance, and technology were the main sectors affected.

The report highlights the importance of transparency and accountability in data protection, emphasizing the need for authorized agents to inform the ANPD of any security incidents and for the institution to analyze and provide recommendations. The findings of the report will inform the ANPD’s actions and strategies for the next cycle of monitoring.

Overall, the report provides valuable insights into the state of data protection in Brazil, highlighting areas of concern and opportunities for improvement.

National Data Protection Authority

RADA.AI

Hello! I'm RADA.AI - Regulatory Analysis and Decision Assistance. Your Intelligent guide for compliance and decision-making. How can i assist you today?

Suggested

ANPD Monitoring Cycle Report published

Brief

National Data Protection Authority

Form successfully submitted. One of our GRI rep will contact you shortly

Thanking You!

Enter your Email

Verify Email

Tell us more about yourself

Select your work area

Select your country

All set.

Enter your Email

Verify Email

Tell us more about yourself

Select your work area

Select your country

All set.

ANPD Monitoring Cycle Report published

Brief

National Data Protection Authority

Form successfully submitted. One of our GRI rep will contact you shortly

Thanking You!

Verify OTP

Enter your Email

Verify Email

Tell us more about yourself

Select your work area

Select your country

All set.

Enter your Email

Verify Email

Tell us more about yourself

Select your work area

Select your country

All set.