August 12, 2021

Brazil’s government recently announced the members of the National Council for the Protection of Personal Data and Privacy (CNPD), a government agency critical to implementing the country’s privacy policies.

The council is responsible for the formulation of guidelines for the application of data protection rules, including the granting of subsidies towards the creation of national data protection and privacy policy.

Under the leadership of some government officials, the council also includes representatives of civil society organizations, academia, trade unions and many public sector bodies.

The 23 board members and deputies of the CNPD each serve a two-year term. Board membership to the CNPD is considered to be relavant, unpaid provision of public service. 

The Presidential Decree does not specify when the CNPD will take office, and the CNPD Board of Directors will meet regularly three times a year, on an extraordinary basis, whenever convened by the President of the Council.

The Brazilian data protection rules were introduced in September 2020. It was stipulated that despite attempts to delay the sanctions until 2022, organizations would have a grace period of one year to adapt to the new rules.

In October 2020, the ANPD, consisting of board members responsible for enforcing the rules, was appointed.

Starting August 1, Brazilian organizations processing sensitive data will face fines and other administrative sanctions if they breach data protection rules.

For more information, read the original story in ZDNet.