PROCON Fines Raia Drogasil R$ 8 Million for Requiring Customers’ CPF

According to the agency, this practice was used to profile customers and target offers, but without prior consent and transparency, posing a risk to privacy, especially in light of potential data breaches. The company argued that personal identification is optional and that its practices comply with the LGPD, stating that it will appeal the decision. However, Procon determined that collecting data without proper notice violates fundamental consumer rights, highlighting potential harm caused by the misuse of such information, such as difficulties in obtaining insurance or health plans.

The decision underscores the importance of transparent practices in handling personal data, as required by Brazilian legislation. It is essential for companies to prioritize consumer privacy and security.