backNewsletter (#007/2025) on Privacy and Data Protection by Campos Thomaz Advogados
Alerts, materials, and updates on Privacy, Data Protection, and Cybersecurity.
To subscribe, click here.
Find out more about our DPO as a Service
We have prepared specific material to explain how the external DPO as a Service works. Contact our partners
Campos Thomaz Contributes Brazil Chapter to ITechLaw’s New Edition of the Startup Legal Playbook
Campos Thomaz Advogados is proud to announce its participation in the third edition of the Startup Legal Playbook, a global initiative by the International Technology Law Association (ITechLaw). The publication brings together contributions from over 70 law firms worldwide, offering practical guidance on key legal issues faced by startups across different jurisdictions. Our firm had the honor of authoring the Brazil chapter, providing a clear and up-to-date overview of the legal and regulatory landscape for startups operating or expanding in the country. Learn more.
Nominations of Campos Thomaz Advogados and its partner Alan Campos Thomaz in Leaders League and Chambers and Partners
Campos Thomaz Advogados and its partner Alan Campos Thomaz have been recognized by Leaders League in the areas of Artificial Intelligence, Data Protection, Technology, Startups and Innovation, and Venture Capital. They were also ranked by Chambers and Partners in the areas of Data Protection and Technology.
Article by our partners Alan Campos Thomaz and Juliana Sene Ikeda on the judgment of article 19 of the Internet Civil Framework
Partners Alan Campos Thomaz and Juliana Sene Ikeda published an article on JOTA about the majority formed in the Federal Supreme Court (STF) regarding Article 19 of the Internet Civil Framework (Marco Civil da Internet). Learn more.
16 Billion Password Leak Raises Legal Concerns over Data Security Practices
In June 2025, researchers from the independent platform Cybernews reported a massive leak involving an estimated 16 billion login credentials, compiled from around 30 different databases. According to the team, the exposed data includes recent information and presents serious potential for large-scale exploitation. While some cybersecurity experts have questioned the accuracy of the total volume — citing possible duplication and outdated records — portions of the dataset had not been publicly identified before, and one of the largest files appears to relate to Portuguese-speaking users. Learn more.
LGPD in Brazilian Courts: Growing Technical Rigor and Relevance in Judicial Decisions
The LGPD Panel in the Courts, conducted by CEDIS-IDP in partnership with Jusbrasil, reports a significant rise in references to Brazil’s General Data Protection Law (LGPD) in judicial rulings, jumping from 7,503 citations between October 2022 and 2023 to 15,921 in the latest year. Analyzing over two thousand cases, the study highlights Articles 5, 7, and 44 as the most cited, with particular focus on sensitive personal data—an area increasingly refined in both judicial and regulatory discourse. The findings demonstrate that Brazil’s judiciary is deepening its technical understanding and legal reasoning regarding LGPD, influencing multiple fields of law such as Consumer, Civil, and Labor law. Learn more.
EDPB to launch practical resources to simplify GDPR application
The European Data Protection Board (EDPB) has announced a series of initiatives aimed at simplifying the application of the GDPR, with a particular focus on micro, small, and medium-sized enterprises. Adopted on 2 July 2025, the statement introduces ready-to-use templates, checklists, FAQs, and other practical tools to support legal compliance. It also outlines plans to standardise breach notification forms and improve guidance formats with clearer, more accessible language aligned with the risk-based approach. Learn more.
Data Protection and Savings: How GDPR Strengthens Cybersecurity Across Europe
A recent report by CNIL, France’s data protection authority, highlights that the GDPR goes beyond privacy protection and delivers substantial economic benefits in cybersecurity. The mandatory notification of data breaches has led to a notable reduction—up to 6%—in identity theft cases, resulting in potential savings exceeding one billion euros across the European Union. CNIL further points out that increased corporate cybersecurity efforts create a collective defense, diminishing the overall risk and damage caused by cyberattacks. Learn more.
ANPD Opens Applications for Regulatory Sandbox on Artificial Intelligence
The Brazilian National Data Protection Authority (ANPD) has launched a call for projects to participate in its first regulatory sandbox focused on artificial intelligence and data protection. The initiative aims to foster experimentation with innovative technologies, techniques, and business models that promote algorithmic transparency. Applications are free of charge and open until August 10, 2025, via email to sandbox@anpd.gov.br. Participation is limited to public or private legal entities with the necessary technical and economic capacity. Learn more.
Brazil Moves Toward a National Data Protection Policy: CNPD Submits Strategic Input to the ANPD
In a document published in June 2025, the National Council for the Protection of Personal Data and Privacy (CNPD) submitted to the ANPD a comprehensive set of strategic recommendations to support the development of Brazil’s National Policy on Personal Data Protection and Privacy. The materials were produced by six Temporary Working Groups (GTTs) formed in October 2024, focused on themes such as education, data governance, innovation, compliance, and the intersection between data protection and access to public information. After around 60 virtual meetings and a plenary discussion in March 2025, the final content was consolidated and presented in a structured format. Learn more.
LGPD Infographic
Access the LGPD infographic prepared by our firm. Access here
Explore our series of content on privacy, data protection, and cybersecurity.
Discover our series of content on privacy, data protection, and cybersecurity. Access the full series here.
Produced by Alan Campos Thomaz and João Marcelo de Oliveira
share
