On May 5, 2015, the Centre for Information Policy Leadership at Hunton & Williams (“CIPL”) filed comments in English and Portuguese on Brazil’s draft law “on the processing of personal data to protect the personality and dignity of natural persons” (the “Draft Law”).
- the draft law’s jurisdictional scope;
- the controller/processor distinction;
- the status of anonymized data;
- principles of processing;
- purpose specifications and “compatibility” of uses;
- consent and its alternatives and exceptions;
- cross-border transfer mechanisms;
- data transferred to Brazil for processing;
- good practices;
- the time frame for effectiveness of the law; and
- the competent authority.
The comments were part of CIPL’s ongoing Brazil outreach initiative. In March, a CIPL delegation travelled to Brasilia and Rio de Janeiro to meet with Brazilian government representatives, organizations and experts to discuss global privacy law and best practice developments and other issues of mutual interest. CIPL also has planned a joint global privacy dialogue workshop in Brazil for later this year.