Draft of Regulation on Reporting Information Security Incidents

The Brazilian Data Protection Authority (ANPD) released the draft of a resolution defining the information security incident reporting procedures before the ANPD and the data subjects, as required under Article 48 of the General Data Protection Law (LGPD).

The draft of the Regulation on Reporting Information Security Incidents is open to public comment until May 31, 2023 and would apply to all reports already provided to the ANPD so far.