MGI approves incident management plan and privacy by design guidelines

The Ministry of Management and Innovation in Public Services (MGI) has approved two strategic documents aimed at strengthening institutional governance on personal data protection. The approvals were formalized through CPDP/MGI Resolutions No. 3 and No. 5, both dated December 19, 2025, and deliberated by the Personal Data Protection Committee. The measures are intended to enhance the Ministry’s compliance with the Brazilian General Data Protection Law (LGPD). One of the approved documents is the Personal Data Incident Management Plan, which sets out procedures, internal workflows, and responsibilities for handling security incidents, including the possible notification to the Brazilian Data Protection Authority (Agência Nacional de Proteção de Dados).

In addition, the “Privacy by Design Guidelines” were approved, adopting a preventive approach by requiring data protection considerations from the early stages of projects, systems, and public services, thereby reinforcing privacy as a core element of MGI’s planning and operational processes. Learn more.

share