Labor Court Convicts Companies for LGPD Violation in Recruitment via Gupy

In a ruling issued in April 2025, Brazil’s 15th Regional Labor Court (Campinas/SP) ordered two companies to pay R$ 200,000 in collective moral damages due to violations of the Brazilian General Data Protection Law (LGPD) during recruitment processes conducted through the Gupy platform. The Public Labor Prosecutor’s Office (MPT) alleged that candidates were subjected to intrusive and disproportionate questions — such as “I criticize authorities when I disagree with them” and “I have trouble sleeping” — which could lead to the inference of sensitive data without adequate legal basis. In addition to the fine, the court prohibited further collection of such information and imposed governance measures, including appointment of a Data Protection Officer (DPO), maintenance of data processing records (ROPA), and review of privacy policies. Learn more.

share