Brazil: The National Data Protection Authority (ANPD) publishes its 2021-2023 Cybersecurity & Data Privacy Strategic Plan

Cybersecurity & Data Privacy

On February 2, 2021, the Brazilian National Data Protection Authority (ANPD) published its Strategic Plan for its three upcoming years of activity (from 2021 to 2023), which can be accessed here.

The Plan sets forth the ANPD’s mission, vision, and values. Its mission is set as “to ensure the protection of personal data”, with the broader vision of becoming “an example to be pursued, at national and international levels, in the Personal Data Protection scenario”. To do so, its core values are “ethics, transparency, integrity, fairness, effectiveness, and accountability”.

Such Strategic Plan also establishes the activities and discussions that ANPD plans to take place in order to achieve its three macro strategic goals, which are: 1. To promote the strengthening of a personal data protection culture; 2. To establish an effective regulatory environment for the protection of personal data; and 3. To improve the conditions for compliance with data protection normative provisions.

The first goal involves strategic activities set to prevent and detect any infringements to the Brazilian General Data Protection Law (LGPD), as well as campaigns regarding that which is set forth in the Personal Data Protection regulation in order to promote the training and guiding of both the society in general and the data processing agents on the matter.

The second objective concerns the definition of the Authority’s priorities in face of its regulatory agenda, the approval of the specific regulation topics to be later discussed, and the establishment of procedures and mechanisms to promptly address identified data breaches and received complaints.

The third objective brings together actions aimed at ensuring the adequate and sufficient structure, and physical and budgetary conditions for the proper functioning of the Authority.

The Plan publicizes ANPD’s initiatives and organization. As of a consequence, it contributes for the creation of a Data Protection environment with greater legal security, transparency, and predictability concerning the various unclear issues left in the LGPD for pending specific regulation.

It should be noted that ANPD has a central role in the structuring of a Brazilian data protection culture, as it is responsible for the structuring of regulation, normative parameters and guidelines on the matter. In addition, the Authority represents an important step towards the greater positioning of the Nation in the increasingly competitive global data protection context.

We continue to monitor ANPD’s activities since this initial structuring stage and reinforce our commitment to keep you updated with any further news.