The Communication Committee of the Brazilian Chamber of Deputies has approved a bill that exempts political parties and religious organizations from fully complying with the General Data Protection Law (LGPD). Under the approved text, these entities would not be required to adhere to data handling obligations such as data collection, usage, and storage controls, and would be shielded from penalties for potential violations. Congressman David Soares (União-SP), who authored the substitute version, argued that many churches and political parties, especially smaller ones, lack the infrastructure and technical capacity to meet LGPD requirements, as they are non-profit and funded through voluntary contributions.
The approved text replaces Bill 12/15 and related proposals, which initially focused on biometric identification—a topic the rapporteur believes is already covered by current law. The bill still needs to be reviewed by the Committee on Constitution, Justice and Citizenship (CCJ) and approved by both the Chamber of Deputies and the Senate to become law. The proposal has sparked concerns over the protection of personal data of members and supporters, reopening the debate on responsibilities and limits in handling sensitive information.