The 3rd Public Prosecutor’s Office of Campo Mourão (state of Paraná, Brazil) filed Civil Lawsuit No. 0004208-55.2025.8.16.0058 against the State of Paraná, state IT company Celepar, and a private company, for alleged violations of Brazil’s General Data Protection Law (LGPD). The lawsuit challenges the collection and processing of facial biometric data from public school students as part of an AI-based facial recognition attendance system, carried out without proper transparency or valid consent. According to the Prosecutor’s Office, the practice breached key LGPD principles such as purpose limitation, necessity, and transparency, and undermined the students’ right to informational self-determination.
The lawsuit also denounces the improper use of sensitive data such as facial expressions and attributes—including smiles, closed eyes, and accessories like glasses or mustaches—as required by the technical contract. The Prosecutor seeks a preliminary injunction to halt the data processing and, in the final judgment, R$ 15 million in collective moral damages, along with a permanent ban on the use of facial biometrics for school attendance control. The case highlights the risks of deploying invasive technologies in educational settings without legal safeguards and emphasizes the importance of transparency and caution in the public sector’s adoption of AI systems.