GUIA

MELHORES PRÁTICAS
PARA APLICAÇÃO DA
LEI GERAL
DE PROTEÇÃO
DE DADOS

LGPD
 Prepare-se para a aplicação da Lei Geral de Proteção de Dados - LGPD

3HQVDQGRHPDMXGDUDV$VVRFLDo}HVGH0DUFDVXDV5HGHVGH&RQFHVVLRQiULDV¿OLDGDVDVVLP
FRPRQRVVRV5HJLRQDLVH6,1&2',9VDVHSUHSDUDUSDUDDDSOLFDomRGD/*3'±/HL*HUDOGH
3URWHomRGH'DGRVSUHYLVWDSDUDHQWUDUHPYLJRUHPDJRVWRGHD)(1$%5$9(FRQWUDWRX
DHPSUHVD3HFN6OHLPDQ(GXHDVGUDV3DWUtFLD3HFNH&ULVWLQD6OHLPDQSDUDHODERUDUHVVH
*XLDGH0HOKRUHV3UiWLFDVSDUDD$SOLFDomRGHVVDQRYDOHJLVODomRTXHFHUWDPHQWHLUiH[LJLU
PXLWDDGDSWDomRHDo}HVH¿FD]HVSDUDHYLWDUWUDQVWRUQRVVHMDMXQWRDRVQRVVRVFOLHQWHVFRPRj
$XWRULGDGH1DFLRQDOTXHUHJXODPHQWDUiD/HL

6HMDFRPR&RQWURODGRUHVRX2SHUDGRUHVGHGDGRVVHMDPHVVHVFRPSDUWLOKDGRVRXQmR
FRQVHQWLGRVRXTXHHQWUHPQDUHJUDGHH[FHomRGHYHPRVWHUXP3ODQRGH$o}HVTXHYLVH
REHGHFHUD/*3'TXHWHPEDVLFDPHQWHWUrVSLODUHVIXQGDPHQWDLVTransparência,
Privacidade e Segurança.

7RGRVGHYHUHPRVFRPHoDUMiRXRTXDQWRDQWHVDWUDEDOKDUQDVDGDSWDo}HVQHFHVViULDV
SULQFLSDOPHQWHFRQVLGHUDQGRTXHWHPRVHPQRVVRVFDGDVWURVGHFOLHQWHVRTXHHVWH*XLD
FKDPDGH³OHJDGR´TXHVmRRVGDGRVTXHMiFROHWDPRVGHQRVVRVFOLHQWHVIRUQHFHGRUHVH
FRODERUDGRUHVPDVTXHSUHFLVDPVHUDWXDOL]DGRVPHGLDQWHFRQVHQWLPHQWRGHVHXVWLWXODUHV

(VSHURTXHHVVHPDWHULDOVLUYDFRPRXPYHUGDGHLUR*XLDTXHpRVHXSURSyVLWRHTXHFDGD
$VVRFLDomRGH0DUFD&RQFHVVLRQiULD5HJLRQDO)(1$%5$9(RX6,1&2',9SRVVDPVHJXLU
SDVVRDSDVVRRTXHRULHQWDPDVHVSHFLDOLVWDVFRQWUDWDGDVGHIRUPDDLPSODQWDURVSURFHVVRV
QHFHVViULRVSDUDRFXPSULPHQWRGD/*3'

3RUWDQWRSHoRTXHFRPSDUWLOKHPHVVHPDWHULDOFRPVHXVDVVRFLDGRVHTXHLQIRUPHPTXHR*XLD
SRGHUiVHULPSUHVVRHUHSURGX]LGRFRPRPHOKRUHQWHQGHUHP3DUDLVVRRDUTXLYRMiHVWiQR
IRUPDWRDGHTXDGRSDUDLPSUHVVmR$OpPGLVVRHVVH*XLDWDPEpPHVWDUiGLVSRQtYHOSDUDDFHVVR
RQOLQHQRSRUWDOGD)(1$%5$9(

$)(1$%5$9(()(1$&2',9OKHVGHVHMDPXPDyWLPDOHLWXUDGHVVH*XLDHVXFHVVRQD
LPSODQWDomRGD/*3'

Alarico Assumpção Júnior

Presidente da FENABRAVE/FENACODIV

DISCLAIMERS: A FENABRAVE informa que esse Guia de Melhores Práticas para a

Aplicação da LGPD- Lei Geral de Proteção de Dados é um trabalho contratado pela Federação
e desenvolvido pela empresa Peck Sleiman Edu, e pelas dras. Patrícia Peck e Cristina Sleiman.
2FRQWH~GRGHVWH*XLDQmRH[SUHVVDREULJDWRULDPHQWHDRSLQLmRGD)(1$%5$9(¿FDQGR
a critério de cada leitor considerar e utilizar as informações, nele contidas, conforme seu
entendimento próprio. Desta forma, não nos responsabilizamos por quaisquer informações e
dados que, porventura, possam vir a ser questionados.

3
 Sumário
Introdução à LGPD: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6 5HODomR&RQWURODGRUH2SHUDGRUQR6HWRU 0RQWDGRUD'LVWULEXLGRU&RQFHVVLRQiULD

1.1 Principais Conceitos . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7 )LQDQFHLUD6HJXUDGRUD                                                     37

'DGR3HVVRDO                                                              7 3RUTXHpLPSRUWDQWHVDEHUD)LQDOLGDGHGD&ROHWDGRV'DGRV3HVVRDLV"          39

'DGR3HVVRDO6HQVtYHO                                                       8 3RUTXHpLPSRUWDQWHVDEHUVHKiFRPSDUWLOKDPHQWRGHGDGRVSHVVRDLVFRPRXWUDV

'DGR$QRQLPL]DGR                                                         8 HPSUHVDV"                                                                 44

7LWXODU                                                                    8 6PDUWH,$±'DGRVFDSWXUDGRVQDLQWHUDomRGRVYHtFXORVFRPXVXiULRVH6PDUW&LWLHV±

&RQWURODGRU                                                               9 GHVD¿RVSDUDD&RQIRUPLGDGH                                                45

Operador                                                                 9 4XDLVVmRDVEDVHVGHGDGRVTXHSRGHPVHUXWLOL]DGDVGHIRUPDOLYUHVHPRSHGLGRGH

(QFDUUHJDGR '32                                                          &RQVHQWLPHQWR"                                                            46

Tratamento                                                                $TXHPSHUWHQFHPRVGDGRV"                                              47

Agentes de Tratamento                                                       &50H'06±&RPRWUDEDOKDUDLQWHJUDomRGDV%DVHVGH'DGRVGH&RQFHVVLRQiULDVH

$QRQLPL]DomR                                                              Montadoras                                                               49

5HODWyULRGH,PSDFWRj3URWHomRGH'DGRV3HVVRDLV '3,$                         6HJXUDQoDLQWHUQDHFkPHUDVGHYtGHRYLJLOkQFLDHR/HJtWLPR,QWHUHVVH          51

([HPSOR                                                                 11 5HODWyULRGH,PSDFWRGH3URWHomRGH'DGRV3HVVRDLV5,3'                   53

1.2 Princípios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12 4XDLVDVSHFXOLDULGDGHVQRWUDWDPHQWRGHGDGRVSHVVRDLVQR%%H%&"        54

)LQDOLGDGH                                                                 &RPRDGHTXDUD3ROtWLFDGH3ULYDFLGDGH5RWHLUR                            55

$GHTXDomR                                                                 6HQmRDWHQGHUj&RQIRUPLGDGHGD/HLTXDLVDVFRQVHTXrQFLDV"       56

Necessidade                                                                4XDLVVmRRVGLUHLWRVGRVWLWXODUHVGHGDGRVHSRUTXHFRQKHFrORV"             58

/LYUH$FHVVR 13 4XHPpR(QFDUUHJDGRSHOD3URWHomRGH'DGRV3HVVRDLV'32"                59

4XDOLGDGHGRV'DGRV                                                       13 2TXHpRGHYHUGH5HSRUW"                                               

7UDQVSDUrQFLD                                                             13 &RPRPDQWHUD6HJXUDQoDGD,QIRUPDomRQD3URWHomRGH'DGRV3HVVRDLV        

Segurança                                                                 14 $/*3'DSOLFDVHDSHQDVj&ROHWDH$UPD]HQDPHQWRHPDPELHQWHHOHWU{QLFR"   63

3UHYHQomR                                                                 15 7. ANEXO II - Fichas e Cadastros . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64

1mRGLVFULPLQDomR                                                         15 8. ANEXO III – O QUE NÃO PODE FALTAR NO RELATÓRIO DE
5HVSRQVDELOL]DomRH3UHVWDomRGH&RQWDV                                      15 IMPACTO . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67
'HVD¿RVGR&RPHUFLDO&REUDQoD5KH&RPSUDV . . . . . . . . . . . . . . . .16
3RURQGHFRPHoDU3ULPHLURV3DVVRVSDUDD&RQIRUPLGDGH . . . . . .22
3ULPHLURVSDVVRVSDUDDWHQGHUj$XWRULGDGH1DFLRQDOGH3URWHomR
de Dados Pessoais . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
7HPSRGHDUPD]HQDPHQWR . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
6. ANEXO I - Perguntas e Respostas . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
4XHPVmRRVWLWXODUHVGHGDGRVQRXQLYHUVRDXWRPRELOtVWLFR"                   34
4XHPWHPDFHVVRDRVGDGRVSHVVRDLVQDHPSUHVD"                           35
4XDORYDORUGRVGDGRVGRVPHXVFOLHQWHV"3RUTXHSUHFLVRSURWHJrORV"          36

4 5

INTRODUÇÃO
À LGPD:
$SURWHomRGRVGDGRVSHVVRDLVQmRpXP
WHPDUHFHQWH$RFRQWUiULRpXPDVVXQWR
HPHYROXomRGHQWURGRHVSHFWURMXUtGLFR
HVSHFLDOPHQWHQRUROGDVJDUDQWLDV
IXQGDPHQWDLVGRVGLUHLWRVKXPDQRV
GHYLGRDRDXPHQWRGDLPSRUWkQFLDGR
XVRGDVLQIRUPDo}HVGRVLQGLYtGXRVQR
FRQWH[WRGD6RFLHGDGH'LJLWDO
1DDERUGDJHPVREUHDSURWHomRGRVGDGRVSHVVRDLVGHYHVHOHYDUHP
FRQVLGHUDomRDRPHQRVDVSHFWRVRGDtransparência, o da privacidade
e o da segurança
1R%UDVLODSULYDFLGDGHMipXPGLUHLWRIXQGDPHQWDOJDUDQWLGRSHOD
&RQVWLWXLomR)HGHUDO%UDVLOHLUDGHVHQGRWmRLPSRUWDQWHTXHFDVR
KDMDTXDOTXHUYLRODomRpFDEtYHOLQGHQL]DomRSRUGDQRPDWHULDORXPRUDO
$OpPGLVVRQRVLVWHPDOHJDOEUDVLOHLURKiXPDVpULHGHOHLVTXHGHDOJXP
PRGRWUD]HPDOJXQVGRVDVSHFWRVUHODFLRQDGRVjSURWHomRGHGDGRV
SHVVRDLVVHMDQR&yGLJRGH'HIHVDGR&RQVXPLGRUQR'HFUHWRGR&RPpUFLR
(OHWU{QLFRRXQR0DUFR&LYLOGD,QWHUQHW
$QHFHVVLGDGHGHIRUWDOHFHUFRPUHJXODPHQWDo}HVPDLVULJRURVDVDSURWHomR
GRVGDGRVSHVVRDLVHPGLYHUVRVSDtVHVYHLRFRPRUHVXOWDGRGLUHWR
GRDXPHQWRGRVLQFLGHQWHVGHYD]DPHQWRGHGDGRVEHPFRPRWDPEpP
GDGLVFXVVmRVREUHRVOLPLWHVGHXVRGDVLQIRUPDo}HVGDVSHVVRDVHGD
QHFHVVLGDGHGHKDYHUXPPDLRUHPSRGHUDPHQWRGRVWLWXODUHVGRVGDGRVQR
SURFHVVRGHFRQWUROHHHOLPLQDomRGHVXDVLQIRUPDo}HV
6 7
1HVWHFRQWH[WRR%UDVLODVVLPFRPRRXWURVSDtVHVVHJXLQGRDOLGHUDQoDGD
8QLmR(XURSHLDD¿PGHFRQWLQXDUDIRPHQWDUXPDPELHQWHGHQHJyFLRV
VDGLRHVHJXURFRPUHJUDVFODUDVVREUHWUDWDPHQWRGHGDGRVSHVVRDLV
LPSOHPHQWRXXPDOHJLVODomRHVSHFt¿FD
6XUJHHQWmRD/HL*HUDOGH3URWHomRGH'DGRV3HVVRDLV/HLGH
FRPRSULPHLURJUDQGHPDUFRUHJXODWyULRVREUHRWHPDQRSDtV±FRP
SUHYLVmRGHHQWUDUHPYLJRUHPDJRVWRGHFDVRQmRRFRUUDQHQKXPD
SURUURJDomRPHGLDQWH3URMHWRGH/HL
$/*3'DSOLFDVHHPTXDOTXHURSHUDomRGH7UDWDPHQWRGH'DGRV3HVVRDLV
UHDOL]DGDSRUSHVVRDQDWXUDORXMXUtGLFDGHGLUHLWRS~EOLFRRXSULYDGR
(PUHODomRjVXDDSOLFDomRWHUULWRULDOSRGHPRVFRQVLGHUDUDV
VHJXLQWHVKLSyWHVHV
ŀ 2SHUDomRGHWUDWDPHQWRUHDOL]DGDQR%UDVLO
ŀ 2IHUWDGHSURGXWRVEHQVRXVHUYLoRVRXRWUDWDPHQWRGHGDGRVSHVVRDLV
UHDOL]DGRQR%UDVLO
ŀ 'DGRVSHVVRDLVTXHWHQKDPVLGRFROHWDGRVQR%UDVLO
1.1 Principais Conceitos
3DUDLPSOHPHQWDomRGHTXDOTXHUSURMHWRH
SULQFLSDOPHQWHSDUDDVXDDSOLFDomRHP
XPVHWRUHVSHFt¿FRFRPRRDXWRPRELOtVWLFR
pSUHFLVRFRQKHFHURVSULQFLSDLVFRQFHLWRV
WUD]LGRVSHOR$UWGD/HL
FRQIRUPHYHUHPRVDVHJXLU
Dado Pessoal
,QIRUPDomRUHODFLRQDGDjSHVVRDQDWXUDOLGHQWL¿FDGDRXLGHQWL¿FiYHO2
WHUPR³LGHQWL¿FiYHO´VLJQL¿FDTXHVHPSUHTXHXPDLQIRUPDomRSHUPLWLU
LGHQWL¿FDUXPWLWXODUSHVVRDDLQGDTXHVHMDDJUHJDGDDRXWUDLQIRUPDomR
HVVDLQIRUPDomRVHUiFRQVLGHUDGDXPDado Pessoal.
 ([HPSOR1RPH5*&3)(PDLO7HOHIRQH(QGHUHoR3ODFDGH9HtFXOR
1~PHURGH0DWUtFXOD1~PHURGH26H1~PHURGR&OLHQWHTXDQGRIRUHP
UHODWLYRVjSHVVRDItVLFDFKDVVLV$WpPHVPRR1~PHURGHXPD3URSRVWD
TXDQGRWRUQDURFOLHQWHLGHQWL¿FiYHOVHUiFRQVLGHUDGRDado Pessoal.
Dado Pessoal Sensível
O Dado Pessoal SensívelpR'DGR3HVVRDOUHODFLRQDGRjRULJHPUDFLDO
RXpWQLFDFRQYLFomRUHOLJLRVDRSLQLmRSROtWLFD¿OLDomRDVLQGLFDWRRXj
RUJDQL]DomRGHFDUiWHUUHOLJLRVR¿ORVy¿FRRXSROtWLFRGDGRUHIHUHQWHj
VD~GHRXjYLGDVH[XDOGDGRJHQpWLFRRXELRPpWULFRTXDQGRYLQFXODGRD
XPDSHVVRDQDWXUDO
([HPSOR)LFKDGH6D~GH$WHVWDGR0pGLFR'HFODUDomRGH7LSR6DQJtQHR
'HFODUDomRGH5HOLJLmR)RUPXOiULRGH&RWDV (VWXGDQWLO )LFKDSDUD6HOHomR
GH)XQFLRQiULR &RWD(VSHFLDO 
$WHQomRDRV&DGDVWURVQRVTXDLVVmRVROLFLWDGDVLQIRUPDo}HVFRPR6H[R
2ULJHP5DFLDO$¿OLDomRD&RQJUHJDo}HV5HOLJLRVDVRXPHVPR'DGRV
5HODFLRQDGRVj6D~GH
'DGR$QRQLPL]DGR
'DGRUHODWLYRDWLWXODUTXHQmRSRVVDVHULGHQWL¿FDGRFRQVLGHUDQGR
DXWLOL]DomRGHPHLRVWpFQLFRVUD]RiYHLVHGLVSRQtYHLVQDRFDVLmR
GHVHXWUDWDPHQWR
([HPSOR'DGRVHVWDWtVWLFRVDSHQDVLQVHULGRVHP5HODWyULRGH9HQGDV
UHIHUHQWHVDRVGLDVRXSHUtRGRVVHPLGHQWL¿FDomRGHFOLHQWHVRXPHVPRGR
YHQGHGRUFRPRPRYLPHQWDomRGRVKRZURRPSRUFDORURQGHVHLGHQWL¿FDR
ÀX[RGDORMDPDVQmRLGHQWL¿FDLQGLYLGXDOPHQWHDVSHVVRDV
8PRXWURH[HPSORGH'DGR$QRQLPL]DGRpDLGHQWL¿FDomRSRUUHODWyULR
VREUHRVHWRUGHYHQGDVPDLVYLVLWDGRTXDQGRFROHWDGRGHIRUPDVHP
LGHQWL¿FDURWLWXODUFRPRSRUVHQVRUHVGHPRYLPHQWRRXGHFDORU
Titular
3HVVRDQDWXUDO)tVLFDDTXHPVHUHIHUHPRVGDGRVSHVVRDLVTXHVmRREMHWRGH
WUDWDPHQWR7RGRVQyVVRPRVWLWXODUHVGHGDGRV
([HPSOR&OLHQWH9LVLWDQWH&DQGLGDWRj9DJD)XQFLRQiULR7HUFHLUL]DGR
3HVVRD)tVLFDTXH7UDEDOKDQR3UHVWDGRU3HVVRD-XUtGLFD $FLRQLVWD TXH
&RQVWDGH&RQWUDWR6RFLDO 
8 9
Controlador
3HVVRDQDWXUDOItVLFDRXMXUtGLFDGHGLUHLWRS~EOLFRRXSULYDGRDTXHP
FRPSHWHPDVGHFLV}HVUHIHUHQWHVDRWUDWDPHQWRGRVGDGRVSHVVRDLV
([HPSOR(PSUHVD(PSUHJDGRUDTXH&DSWXUD'DGRVGR&OLHQWHRXDLQGD
GH6HOHomRGH3HVVRDOTXHFDSWXUDGDGRVGHFDQGLGDWR
$&RQFHVVLRQiULDDRFROHWDUGDGRVGHIXQFLRQiULRVHFOLHQWHV0RQWDGRUDVDR
FROHWDUHPUHODomRGLUHWDGDGRVGHIXQFLRQiULRVWHUFHLUL]DGRVRXFOLHQWHV
RXPHVPRD)LQDQFHLUDHD6HJXUDGRUDXPDYH]TXHRWUDWDPHQWRGHGDGRV
QmRpIHLWRHPQRPHGD&RQFHVVLRQiULD
Operador
3HVVRDQDWXUDORXMXUtGLFDGHGLUHLWRS~EOLFRRXSULYDGRTXHUHDOL]DR
WUDWDPHQWRGHGDGRVSHVVRDLVHPQRPHGRFRQWURODGRUeRFDVRGDV
HPSUHVDVGHQWURGRSUySULRHFRVVLVWHPDTXHSRUIRUoDGDUHODomRMXUtGLFD
SURPRYHRWUDWDPHQWRGHGDGRVHPQRPHGHTXHPDFRQWUDWRX
([HPSOR(PSUHVDSUHVWDGRUDGHVHUYLoRVWHUFHLUL]DGRVTXHH[HFXWD
WUDWDPHQWRPHGLDQWHRUGHQV OLPLWDGR FRPRpRFDVRGHXPDHPSUHVD
GHFRXUULHUGHVHUYLoRVGH7,DJrQFLDVGHPtGLDVGLJLWDLVGHPDUNHWLQJ
GHVSDFKDQWHVHQWUHRXWUDV
3DUDPHOKRUH[HPSOL¿FDUDGLIHUHQoD entre Controlador e Operador, do
SRQWRGHYLVWDGRHFRVVLVWHPDDXWRPRELOtVWLFRXWLOL]DUHPRVDFinanceira
e a SeguradoraTXHVmRDPEDVControladorasXPDYH]TXHDWXDP
PHGLDQWHFRQWUDWRGLUHWRFRPRWLWXODUFOLHQWHDLQGDTXHVHMDSRULQWHUPpGLR
GHXPDFRQFHVVLRQiULD
-iRDespachantepXPOperadorSRLVRWLWXODUFOLHQWHQmRR
FRQWUDWDVHSDUDGDPHQWH1RUPDOPHQWHDVFRQFHVVLRQiULDVHPEXWHPHVWH
VHUYLoRQDYHQGD
2EVHUYDPRVTXHR$UWLJRFLWDDSHQDVRControlador, por tratar
GRGHYHUGHGHL[DURFRQWDWRGRDPO HQFDUUHJDGRSHODSURWHomRGH
GDGRVSHVVRDLV GLYXOJDGRQRVLWH,VVRVHGHYHDRIDWRGHTXHFDEHDR
Controlador RGHYHUGHUHSRUWDUjDXWRULGDGHHUHFHEHUUHTXLVLo}HVGH
WLWXODUHVFOLHQWVVREUHRWUDWDPHQWRGHVHXVGDGRV/HPEUHVHGHTXHPHVPR
um OperadorDFDEDVHQGRControladorGHGDGRVTXDQGRVHUHIHUHDVHXV
SUySULRVIXQFLRQiULRVHDFLRQLVWDVRXDVHXVIRUQHFHGRUHV
 (PUHVXPRQRJHUDOHPDOJXPPRPHQWRDLQVWLWXLomRDFDEDWHQGRSRVLomR SURFHVVRVGHWUDWDPHQWRGHGDGRVSHVVRDLVTXHSRGHPJHUDU
de um Controlador. ULVFRVjVOLEHUGDGHVFLYLVHDRVGLUHLWRVIXQGDPHQWDLVGRFLGDGmR
WLWXODUEHPFRPRPHGLGDVVDOYDJXDUGDVHPHFDQLVPRVGH
Encarregado (DPO) PLWLJDomRGHULVFR
3HVVRDLQGLFDGDSHORControlador e Operador DUWR9,,, SDUDDWXDU
FRPRFDQDOGHFRPXQLFDomRHQWUHR&RQWURODGRURVWLWXODUHVGRVGDGRV
SHVVRDVHD$XWRULGDGH1DFLRQDOGH3URWHomRGH'DGRV(ANPD).
([HPSOR3RGHVHUSHVVRDLQWHUQDRXH[WHUQDItVLFDRXMXUtGLFDRXPHVPR
XPFRPLWrUHVSRQViYHOSRUH[HFXWDUYiULDVIXQo}HVSDUDDWHQGHUDRV
WLWXODUHVGRVGDGRVjDXWRULGDGHUHVSRQGHUSRULQFLGHQWHVGHYD]DPHQWRV
GHGDGRVLPSOHPHQWDURSURJUDPDGHSURWHomRGHGDGRVSHVVRDLVHFXPSULU
FRPRGHYHUGHUHSRUWiORV

7UDWDPHQWR
7RGDRSHUDomRUHDOL]DGDFRPGDGRVSHVVRDLVFRPRDVTXHVHUHIHUHPj
FROHWDSURGXomRUHFHSomRFODVVL¿FDomRXWLOL]DomRDFHVVRUHSURGXomR
WUDQVPLVVmRGLVWULEXLomRSURFHVVDPHQWRDUTXLYDPHQWRDUPD]HQDPHQWR
HOLPLQDomRDYDOLDomRRXFRQWUROHGDLQIRUPDomRPRGL¿FDomRFRPXQLFDomR
WUDQVIHUrQFLDGLIXVmRRXH[WUDomRGRVGDGRV
([HPSOR2PHURDUPD]HQDPHQWRGHGDGRVSHVVRDLVpXPWLSRGH
WUDWDPHQWRSRULVVRDOFDQoDROHJDGR DUTXLYR 
([HPSOR
7RGDYH]TXHKRXYHU7UDWDPHQWRGH'DGRV3HVVRDLV6HQVtYHLVRXDEDVH
OHJDOTXHMXVWL¿TXHRWUDWDPHQWRGHGDGRVSHVVRDLVIRUROHJtWLPR
interesse, poderá ser exigida, pela ANPD, a apresentação do
5HODWyULRGH,PSDFWR

$JHQWHVGH7UDWDPHQWR
6mRFRQVLGHUDGRV$JHQWHVGH7UDWDPHQWRRControlador e o Operador.
$QRQLPL]DomR
8WLOL]DomRGHPHLRVWpFQLFRVUD]RiYHLVHGLVSRQtYHLVQRPRPHQWRGR
WUDWDPHQWRGHGDGRVSRUPHLRGRVTXDLVXPGDGRSHUGHDSRVVLELOLGDGHGH
DVVRFLDomRGLUHWDRXLQGLUHWDDXPLQGLYtGXR
([HPSOR(PXPD%DVHGH'DGRVRQGHFRQVWHDSHQDVRUHVXOWDGR¿QDOGDV
YHQGDVVHPLGHQWL¿FDomRGRFRPSUDGRUFRPRQRVWLSRVGH5HODWyULRVGH
9HtFXORV9HQGLGRVPDVTXHQmRLGHQWL¿FDPDSODFDGHVVHVYHtFXORVQHPR
QRPHRX&3)GRVFRPSUDGRUHV
5HODWyULRGH,PSDFWRj3URWHomRGH'DGRV3HVVRDLV '3,$ 
'RFXPHQWDomRGR&RQWURODGRUTXHFRQWpPDGHVFULomRGRV
,VVRRFRUUHSRUH[HPSORQRXVRGHWHFQRORJLDVGLVUXSWLYDVRQGHSRVVDVHU
TXHVWLRQDGRRULVFRjSULYDFLGDGHFRPRRFRUUHHPDOJXPDVVROXo}HVTXH
XWLOL]DPUHFRQKHFLPHQWRIDFLDOXVRGH6FRUHDOJRULWPRVGHLQWHOLJrQFLD
DUWL¿FLDOHQWUHRXWURV
$RHODERUDUXP'3,$ 5HODWyULRGH,PSDFWRj3URWHomRGH'DGRV
Pessoais)GHYHPRVJDUDQWLUTXHQRPtQLPRHVWHMDPSUHVHQWHV
ŀ $QDWXUH]DHVFRSRFRQWH[WRH¿QDOLGDGHGRWUDWDPHQWR
ŀ $YDOLDomRGDQHFHVVLGDGHSURSRUFLRQDOLGDGHH0HGLGDVGH&RPSOLDQFH
ŀ ,GHQWL¿FDomRH$VVHVVPHQWGRV5LVFRVDRVWLWXODUHVGHGDGRV
ŀ ,GHQWL¿FDomRGDVPHGLGDVSDUDPLWLJDUHVVHVULVFRV

 11
 1.2 Princípios
&RQKHFHURVSULQFtSLRVGD/*3'pXPUHTXLVLWR
SDUDTXHR7UDWDPHQWRGH'DGRV3HVVRDLVVHMD
FRQVLGHUDGRGHERDIpVHJXQGRRFDSXWGRDUWLJR
žGD/HLTXHSUHYrRVHJXLQWH ou seja, SRGHKDYHUOLPLWDo}HVDRVeu cumprimento
Finalidade
5HDOL]DomRGRWUDWDPHQWRSDUDSURSyVLWRV
OHJtWLPRVHVSHFt¿FRVH[SOtFLWRVHLQIRUPDGRVDRWLWXODUSHVVRDVHP
SRVVLELOLGDGHGHWUDWDPHQWRSRVWHULRUGHIRUPDLQFRPSDWtYHOFRPHVVDV
¿QDOLGDGHV,VVRTXHUGL]HUTXHpIXQGDPHQWDOGHL[DUFODURSDUD
TXDLV¿QDOLGDGHVVHUmRWUDWDGRVRVGDGRV(VVDV¿QDOLGDGHVGHYHP
VHULQIRUPDGDVDRWLWXODUGRVGDGRVGHIRUPDHVSHFt¿FDHH[SOtFLWD2XVHMD
SHOD/HLGD/*3'XPGRVSULQFtSLRVPDLVLPSRUWDQWHVpRGD
transparência.3RULVVRVySRGHPVHUWUDWDGRVGDGRVSDUD¿QDOLGDGHVTXH
IRUDPLQIRUPDGDVSUHYLDPHQWHGHIRUPDH[SOtFLWD QmRLPSOtFLWD DRWLWXODU
GRVGDGRVHTXHVHMDHYLWDGRRWUDWDPHQWRSDUD¿QDOLGDGHVRFXOWDVTXH
JHUHPVXUSUHVDRXVHMDPQRYLGDGHSDUDRWLWXODU
3RGHDWpKDYHUXPDPXGDQoDGH¿QDOLGDGHIXWXUDPDVHODGHYHUi
VHULJXDOPHQWHLQIRUPDGDSDUDWRGDDEDVHGHWLWXODUHVGHGDGRV
VHPHVTXHFHUGDVROLFLWDomRGHFRQVHQWLPHQWRTXDQGRQHFHVViULR
$GHTXDomR
&RPSDWLELOLGDGHGRWUDWDPHQWRFRPDV¿QDOLGDGHVLQIRUPDGDVDRWLWXODU
GHDFRUGRFRPRFRQWH[WRGRWUDWDPHQWR$VVLPGHYHKDYHUFRQVLVWrQFLD
HQWUHRTXHIRLLQIRUPDGRDRWLWXODUHRUHDOXVRTXHVHID]GRGDGRSHVVRDO
DWHQGHQGRDXPDSURSRUFLRQDOLGDGH
Necessidade
/LPLWDomRGRWUDWDPHQWRGRGDGRDRPtQLPRQHFHVViULRSDUDDUHDOL]DomR
GDV¿QDOLGDGHVOHJtWLPDVFRPDEUDQJrQFLDGRVGDGRVSHUWLQHQWHV
SURSRUFLRQDLVHQmRH[FHVVLYRVHPUHODomRjV¿QDOLGDGHVGRWUDWDPHQWRGH
GDGRV1mRVHSRGHSRUH[HPSORH[LJLUDFROHWDHXVRGHGDGRVGHUHOLJLmR
SDUDDFRPSUDGHXPYHtFXORSRLVDFROHWDGHVVHGDGRIRJHDRREMHWLYR
SULQFLSDOGRQHJyFLRHQmRpQHFHVViULR

Livre Acesso
*DUDQWLDDRVWLWXODUHVGRVGDGRVjFRQVXOWDIDFLOLWDGDHJUDWXLWDVREUH
DIRUPDHGXUDomRGRWUDWDPHQWRGHVHXVGDGRVEHPFRPRVREUHD
LQWHJUDOLGDGHGRVPHVPRV1RHQWDQWRDH[HPSORGDOLEHUGDGHGHH[SUHVVmR
FRPEDVHQR$UWSRGHVHFRQVWDWDUTXHHVWHQmRpXPSULQFtSLRDEVROXWR
3RUH[HPSORTXDQGRRWUDWDPHQWRWLYHURULJHPQRFRQVHQWLPHQWRGRWLWXODU
RXHVWLYHUHPFRQWUDWRRWLWXODUSRGHUiVROLFLWDUFySLDHOHWU{QLFDLQWHJUDO
de seus dados pessoais, REVHUYDGRVRVVHJUHGRVFRPHUFLDOHLQGXVWULDO
GRVDJHQWHVGHWUDWDPHQWRQRVWHUPRVGHUHJXODPHQWDomRHVSHFt¿FDGD
AutoULGDGH1DFLRQDO
2GLUHLWRDRH[HUFtFLRGROLYUHDFHVVRHFRQ¿UPDomRGHH[LVWrQFLDGH
WUDWDPHQWRGHYHUiVHUDWHQGLGRSHORDJHQWHGHWUDWDPHQWRQRSUD]R
Pi[LPRGHGLDVFRQWDGRVDSDUWLUGDGDWDGRUHTXHULPHQWRGRWLWXODU1R
HQWDQWRD$XWRULGDGH1DFLRQDOSRGHUiGLVSRUGHSUD]RGLIHUHQFLDGRSDUD
setoUHVHVSHFt¿FRV
ePXLWRLPSRUWDQWHVHHVIRUoDUSDUDGHPRQVWUDURHPSHQKRGR
ControladorQDWHQWDWLYDGHFRPSURYDUDUHDOLGHQWLGDGHGRVROLFLWDQWH,
DWHQWDQGRVHSDUDHYHQWXDLVIUDXGHV
Qualidade dos Dados
*DUDQWLDDRVWLWXODUHVGHH[DWLGmRFODUH]DUHOHYkQFLDHDWXDOL]DomRGRV
GDGRVGHDFRUGRFRPDQHFHVVLGDGHHSDUDRFXPSULPHQWRGD¿QDOLGDGHGH
VHXWUDWDPHQWR3RUWDQWRIDFLOLWDURDFHVVRIRUPDGHFRUUHomRHDWXDOL]DomR
GRVGDGRVDRWLWXODUVHUiLPSUHVFLQGtYHO(VWHSULQFtSLRSHUPLWHjV
LQVWLWXLo}HVPDQWHUDVEDVHVGHGDGRVSHVVRDLVDWXDOL]DGDVHLQFOXVLYH
SURPRYHURHQULTXHFLPHQWRGDLQIRUPDomRFRPDMXVWL¿FDWLYDGHQmRJHUDU
XPDVLWXDomRGHWUDWDPHQWRHTXLYRFDGR FRPRHQYLDUXPDPHQVDJHPSDUD
XPFRQWDWRRXHQGHUHoRGHVDWXDOL]DGR 
Transparência
$WUDQVSDUrQFLDpDJDUDQWLDGDGDDRVWLWXODUHVHPIRUQHFHULQIRUPDo}HV
FODUDVSUHFLVDVHIDFLOPHQWHDFHVVtYHLVVREUHDUHDOL]DomRGRWUDWDPHQWRGH
VHXVGDGRVHRVUHVSHFWLYRVDJHQWHVGHVWHWUDWDPHQWRQHVWHFDVRWDPEpP
REVHUYDGRVRVVHJUHGRVFRPHUFLDOHLQGXVWULDO
13
 $UHJXODomRRXRULHQWDomRHVSHFt¿FDGDDXWRULGDGHUHJXODWyULDVREUHTXDO
VHUiRQtYHOGHWUDQVSDUrQFLDH[LJLGRHRXFRPRHOHSRGHVHUDWLQJLGRGH
IRUPDVDWLVIDWyULDGHSHQGHGDFULDomRGD$13'
2SULQFtSLRGDWUDQVSDUrQFLDSRGHUiVHUH[HUFLGRSRUPHLRGHXPD3ROtWLFD
GH3ULYDFLGDGHH3URWHomRGH'DGRV3HVVRDLVSRUGLVFODLPHUV QRWL¿FDo}HV 
FRQWUDWRVHSRURXWUDVIRUPDVGHFRPXQLFDomRFRPRWLWXODUGRVGDGRV
3HORSULQFtSLRGDWUDQVSDUrQFLDDLQGDTXHFHUWRVGDGRVVHMDPFROHWDGRVFRP
EDVHHPH[LJrQFLDOHJDORXTXDOTXHUKLSyWHVHTXHGLVSHQVHRFRQVHQWLPHQWR
VHUiQHFHVViULRLQIRUPDUDRVHXWLWXODUDVLQIRUPDo}HVGHWDOKDGDVVREUHR
WUDWDPHQWRSUHWHQGLGRSDUDVHXVGDGRV
eLPSRUWDQWHGHVWDFDUTXHDFRPXQLFDomRFRPRWLWXODUGHYHUiVHUVHPSUH
SDXWDGDQDFODUH]DHREMHWLYLGDGHVHQGRGHUHVSRQVDELOLGDGHGRControlador
DGHPRQVWUDomRGHTXHGLVSRQLELOL]RXDRWLWXODUWRGDVDVLQIRUPDo}HVDQWHV
GDFROHWDGHTXDOTXHUGDGRSHVVRDO
Segurança
2SULQFtSLRGD6HJXUDQoDSUHVVXS}HDXWLOL]DomRGHPHGLGDVWpFQLFDV
HDGPLQLVWUDWLYDVDSWDVDSURWHJHURVGDGRVSHVVRDLVGHDFHVVRVQmR
DXWRUL]DGRVHGHVLWXDo}HVDFLGHQWDLVRXLOtFLWDVGHGHVWUXLomRSHUGD
DOWHUDomRFRPXQLFDomRRXGLIXVmR3RUWDQWRHVWiGLUHWDPHQWHOLJDGRDRWHPD
6HJXUDQoDGD,QIRUPDomR 6, 
2FRUUHTXHD/HLQmRHVSHFL¿FDRVUHTXLVLWRVGH6HJXUDQoDHWHQGRHPYLVWD
TXHD$13'DLQGDHVWiHPSURFHVVRGHIRUPDomRQmRKiGLUHFLRQDPHQWR
DWpRSUHVHQWHPRPHQWR1RHQWDQWRD$13'SRGHUiQRIXWXURGLULPLUDV
G~YLGDVRXUHJXODPHQWDUTXHVW}HVHVSHFt¿FDVGH6HJXUDQoD
2GHYHUGHVHJXUDQoDIRLLQVWLWXtGRQRV$UWHVHQGRREULJDomRGR
Controlador, OperadorHWDPEpPGHTXDOTXHUSHVVRDTXHWHQKD
FRQWDWRFRPGDGRVSHVVRDLV3RULVVRDFDSDFLWDomRGDVHTXLSHVSRGHVHUXP
YHUGDGHLURGLIHUHQFLDO
14
-XVWDPHQWHSRUQmRWHUHPVLGRGLVSRQLELOL]DGRVUHTXLVLWRVHVSHFt¿FRVpGH
VXPDLPSRUWkQFLDVHJXLUSDGU}HVPXQGLDLVGH6HJXUDQoDGD,QIRUPDomR
FRQIRUPH,62,(&HEHPFRPRD,62
Prevenção
$GRomRGHPHGLGDVSDUDSUHYHQLUDRFRUUrQFLDGHGDQRVHPYLUWXGHGR
WUDWDPHQWRGHGDGRVSHVVRDLV(VWHSULQFtSLRHVWiUHODFLRQDGRjFDSDFLGDGH
GHLGHQWL¿FDUSRWHQFLDLVULVFRVHDSOLFDomRGHPHGLGDVSDUDSUHYHQLUTXHWDLV
ULVFRVSRVVDPVHPDWHULDOL]DU
1DRFRUUrQFLDGHTXDOTXHULQFLGHQWHVHUiPXLWRLPSRUWDQWHTXHRDJHQWH
FRPSURYHRVPHLRVDSOLFDGRVSDUDSUHYHQomRHTXHQmRWHPDSHQDVXPD
SROtWLFDYROWDGDjUHDomRD¿PGHHYLWDUSRWHQFLDLVGDQRVDRVWLWXODUHVGH
GDGRVSHVVRDLV$OpPGLVVRpXPDIRUPDGHGHPRQVWUDUVXDERDIp
1mRGLVFULPLQDomR
$/*3'pFODUDTXDQWRjLPSRVVLELOLGDGHGHUHDOL]DomRGRWUDWDPHQWRGH
GDGRVSDUD¿QVGLVFULPLQDWyULRVLOtFLWRVRXDEXVLYRV3RUWDQWRQmRSRGHUi
SURPRYHURWUDWDPHQWRVHPSUHTXHHVWHSXGHUFDXVDUGDQRDRWLWXODU
SRUGLVFULPLQDomR
'HYHVHWHUPXLWRFXLGDGRFRPDDSOLFDomRGHVWHSULQFtSLRYLVWRTXH
DWpPHVPRHPXPDVLWXDomRRQGHKiXPDGH¿QLomRGHORFDLVGHHQWUHJD
GHPHUFDGRULDSRUVHOHomRGH&(3RX%DLUURLVVRSRGHOHYDUDXPD
LQWHUSUHWDomRGHXVRGHGDGRVSHVVRDLVFRPFDUDFWHUtVWLFDGLVFULPLQDWyULD
3RULVVRpLPSRUWDQWHDLQVWLWXLomRHVWDUUHVSDOGDGDFRPMXVWL¿FDWLYDVTXH
HVFODUHoDPTXHRWUDWDPHQWRGHGDGRVSHVVRDLVQmRSRVVXLFDUDFWHUtVWLFDV
TXHJHUHPHVWHWLSRGHGHVYLR,VVRWRPDPDLRULPSRUWkQFLDQDVVROXo}HV
TXHHQYROYHPDOJXPWLSRGHDOJRULWPRGH6FRUHVLWXDomRHPTXHSRGHPVHU
VROLFLWDGRVRVDWULEXWRVRXIDWRUHVFRPELQDWyULRVDWpROLPLWHHPTXHLVVR
QmRH[SRQKDVHJUHGRGHQHJyFLRV
5HVSRQVDELOL]DomRH3UHVWDomRGH&RQWDV
(PWHUPRVSUiWLFRVWUDWDVHGDGHPRQVWUDomRSHORDJHQWHGD
DGRomRGHPHGLGDVH¿FD]HVHFDSD]HVGHFRPSURYDUDREVHUYkQFLDHR
FXPSULPHQWRGDVQRUPDVGHSURWHomRGHGDGRVSHVVRDLVHLQFOXVLYHGD
H¿FiFLDGHVVDVPHGLGDV
15

DESAFIOS DO COMERCIAL,
COBRANÇA, RH E COMPRAS
3RUFHUWRTXHD/*3'pHVHUiXPJUDQGH
GHVD¿RGHLPSOHPHQWDomRHWDPEpP
de continuidade da
FRQIRUPLGDGHWHQGRHPYLVWDTXHDV
Do}HVSURWHWLYDVHSUHYHQWLYDVGHYHUmRVHU
SHUPDQHQWHPHQWHDWXDOL]DGDV
1RVHWRUDXWRPRELOtVWLFRHVSHFLDOPHQWHQDV
FRQFHVVLRQiULDVGHYHtFXORVpLPSRUWDQWH
GHVWDFDUTXDWURiUHDVUHOHYDQWHVDVTXDLV
WUDWDPXPYROXPHH[SUHVVLYRGHGDGRVSHVVRDLV&RPHUFLDO&REUDQoD
5HFXUVRV+XPDQRVH&RPSUDV
YD]DPHQWRVGHLQIRUPDo}HVTXHVmRRWLSRGHLQFLGHQWHFXMRLPSDFWRGD
YLRODomRpRTXHJHUDDVPXOWDVPDLRUHVSHODV$XWRULGDGHV/RJRQRSULPHLUR
FRQWDWRFRPRFOLHQWHTXHpRWLWXODUGRVGDGRVSHVVRDLVHVVHGHYHUiVHU
LQIRUPDGRVREUHWRGDVDV¿QDOLGDGHVSDUDDVTXDLVVHXVGDGRVSHVVRDLV
VHUmRWUDWDGRV6HSRVVtYHOMiFROHWDURFRQVHQWLPHQWRQRSDGUmRQRYRGD
/*3'QDSULPHLUD¿FKDTXHpSUHHQFKLGDHDVVLQDGD VHMDHODItVLFDHP
SDSHORXGLJLWDOHPXPDSOLFDWLYR 
2FRPHUFLDOWDPEpPOLGDFRPEDVHVGHGDGRVSHVVRDLVRULXQGDVGHRXWUDV
IRQWHVSDUDJHUDomRGHOHDGVVHMDPGHSDUFHLURVRXPHVPRGHIRQWHV
S~EOLFDVFRPRD,QWHUQHWeLPSRUWDQWHGL]HUTXHD/HLSHUPLWHRXVRGHVVDV
LQIRUPDo}HVPDVpSUHFLVRTXHVHMDPGHIRQWHVOHJtWLPDVHSDUDDVTXDLVR
WLWXODUWHQKDFRQVHQWLGRRFRPSDUWLOKDPHQWRGRVVHXVGDGRVSHVVRDLVFRP
WHUFHLURVHPDOJXPDSROtWLFDGHSULYDFLGDGH
8PERPH[HPSORpVHRWLWXODUGRVGDGRVWLYHUSDUWLFLSDGRGHXPHYHQWR
FRPRXP)HLUmRGH$XWRPyYHLVHYLVLWDGRXPHVWDQGHSDUDRTXDOIRUQHFHX
VHXVGDGRV6HWLYHUSUHHQFKLGRDOJXPD¿FKDTXHMiRDYLVDYDHFROHWDYD
VHXFRQVHQWLPHQWRSDUDFRPSDUWLOKDPHQWRGHVHXVGDGRVYLQFXODGRVjV
¿QDOLGDGHVLQIRUPDGDVHQWmRQmRKDYHUiSUREOHPD

eSUHFLVR¿FDUDWHQWRDVLWXDo}HVVHPHOKDQWHVSRLVQHPWRGDEDVH
Para a ÈUHD&RPHUFLDOGHVWDFDVHSULQFLSDOPHQWHRDWHQGLPHQWRQD
GLVSRQtYHORXDFHVVtYHOpOHJtWLPDRXVHMDSRGHWHUVLGRFROHWDGDHP
SRQWDRXVHMDDYHQGDGLUHWDSDUDRFRQVXPLGRU1HVVHFDVRUHFRPHQGD
GHVDFRUGRFRPDOHJLVODomRHPYLJRU(jVYH]HVSRGHWHUVLGRFROHWDGD
VHFXLGDGRFRPGHWDOKHVTXHjVYH]HVSRGHPSDVVDUGHVSHUFHELGRVFRPR
GHIRUPDOtFLWDPDVQmRVLJQL¿FDTXHHVWHMDGLVSRQtYHOSDUDWUDWDPHQWR
SRUH[HPSORDFROHWDGHLQIRUPDo}HVHGRFXPHQWRVGRFRPSUDGRU SHVVRD
SRUWHUFHLURVeLPSRUWDQWHEXVFDUVHPSUHSRUIRQWHVFRQ¿iYHLVSRLVQmR
ItVLFD FRPRVTXDLVRYHQGHGRUWHPDFHVVRHFRQWDWRHTXHSRGHPHQYROYHU
FRPSHQVDDUULVFDUXWLOL]DUGDGRVVHPVDEHUVXDSUHFHGrQFLDWHQGRHPYLVWD
,PSRVWRGH5HQGD&3)5*&RPSURYDQWHGH(QGHUHoR1~PHURGH&HOXODU
DVVDQo}HVSUHYLVWDVQD/HL
:KDWV$SSHQWUHRXWUDVLQIRUPDo}HVH[LJLGDV

Para a ÈUHDGH&REUDQoDGHVWDFDVHTXHDOpPGHDados Pessoais,

9DOHOHPEUDUTXHDSODFDGRYHtFXORWDPEpPpXPGDGRSHVVRDO
SRUYH]HVXWLOL]DPVHDados Pessoais Sensíveis FRPRRFRUUHFRPD
eFRPXPTXHYHQGHGRUHVUHFHEDPFDUW}HVGRVFOLHQWHVRQGHFRQVWDP
DXWHQWLFDomRHYHUL¿FDomRELRPpWULFDRXDDQiOLVHGHUHFRQKHFLPHQWRIDFLDO 
QRPHVREUHQRPHHQ~PHURGHWHOHIRQHSHVVRDODVVLPFRPR¿TXHPGH
HPXLWRHPERUDSRVVDPVHUWUDWDGRVFRPRH[FHomRGHFRQVHQWLPHQWR
SRVVHGRVGDGRVFRQVWDQWHVQD¿FKDFDGDVWUDO/RJRHVVDpXPDIRQWHGH
FRQIRUPHDVEDVHVOHJDLVSUHYLVWDVQD/*3'FRPD¿QDOLGDGHGHSURWHomR
HQWUDGDGHGDGRVSHVVRDLVTXHSUHFLVDVHUPXLWREHPWUDWDGDSDUDHVWDU
GRFUpGLWRGHSUHYHQomRjIUDXGHVHUiQHFHVViULRDWHQGHUDRSULQFtSLRGD
HPFRQIRUPLGDGHFRPDQRYDOHJLVODomRWDQWRQRVHQWLGRGHDWHQGHUDRV
WUDQVSDUrQFLDRXVHMDLQIRUPDUDRWLWXODUSDUDTXHRVGDGRVTXHHVWmR
SULQFtSLRVDSRQWDGRVTXDQWRSULQFLSDOPHQWHSDUDSUHYHQLUHHYLWDU
VHQGRFROHWDGRVVHUmRXVDGRV(VVHVDYLVRVOHJDLVSUpYLRVVmRFRQKHFLGRV

16 17
 SHORWHUPRHPLQJOrV³SULYDF\QRWLFH´HVmRPXLWRLPSRUWDQWHVSDUDD
EOLQGDJHPGDRSHUDomRHSDUDHYLWDUULVFRVGH&21)250,'$'(FRPD
QRYDOHJLVODomR
$OpPGLVVRVDEHUDERUGDURFRQVXPLGRUWLWXODUSRGHID]HUPXLWD
GLIHUHQoD$WHQomR'DGRVEDQFiULRVTXHSHUPLWDPLGHQWL¿FDUGLUHWD
RXLQGLUHWDPHQWHRWLWXODUSHVVRDQDWXUDOSHVVRDItVLFDWDPEpPVmR
considerados dados pessoais1RHQWDQWRVHIRUHPGDGRVGHXPDFRQWD
GH3HVVRD-XUtGLFD(PSUHVDQmRVHUmRFRQVLGHUDGRVGDGRVSHVVRDLVH[FHWR
VHDGRFXPHQWDomRWLYHUDOJXPDLQIRUPDomRVREUHDSHVVRDUHVSRQViYHOSHOD
HPSUHVD TXHDLGHQWL¿TXH 
8PSRQWRLPSRUWDQWHpRFXLGDGRFRPDTXDOLGDGHGHGDGRVSRLVGXUDQWH
DFREUDQoDSRGHDFRQWHFHUGHVHHQWUDUHPFRQWDWRFRPDSHVVRDSRUFDQDLV
TXHSRGHPQmRHVWDUDWXDOL]DGRVHD/*3'WUD]HVWDH[LJrQFLD
-iKRXYHDSOLFDomRGHPXOWDQD(XURSDGHYLGRDRHQYLRGHPHQVDJHPSDUD
RFHOXODUGDSHVVRDHUUDGDID]HQGRFREUDQoDSRULQIRUPDomRGHVDWXDOL]DGD
'HVVHPRGRpSRVVtYHOUHDOL]DURHQULTXHFLPHQWRGDEDVHGHGDGRVSDUD
DWXDOL]DUDVLQIRUPDo}HVSDUD¿QVGHFREUDQoDLQFOXVLYHDSDUWLUGHGDGRV
GHRULJHPS~EOLFDMXVWDPHQWHSDUDDWHQGHUDRSULQFtSLRGDTXDOLGDGHH
HYLWDUHVWHULVFR
3RU¿PWDPEpPDOHUWDPRVVREUHR&RPSDUWLOKDPHQWRGH'DGRV,
pois, QDWHUFHLUL]DomRVHUiH[WUHPDPHQWHQHFHVViULRHVWDEHOHFHU
UHJUDVHUHVSRQVDELOLGDGHVWHQGRHPYLVWDTXHRcontratado, neste caso,
VHUiFRQVLGHUDGRVHPSUHTXHSURPRYHURWUDWDPHQWRGHGDGRVHPQRPH
do ControladorRTXHpFRPXPQRVFRQWUDWRVFRPDJrQFLDVGHPtGLDV
GLJLWDLVPDUNHWLQJGHVSDFKDQWHVHQWUHRXWURV
A área de 5HFXUVRV+XPDQRVPHUHFHDWHQomRHVSHFLDOSRLVDSHVDUGH
QmROLGDUFRPGDGRVGHFOLHQWHVSURPRYHRWUDWDPHQWRGHGDGRVSHVVRDLV
GRVFRODERUDGRUHV([LVWHPYiULRVGHVD¿RVSDUDR5+DFRPHoDUSHOR
SURFHVVRVHOHWLYRWHQGRHPYLVWDTXHVHWUDWDGHXPDUHODomRRQGHDLQGDQmR
KiYtQFXORHPSUHJDWtFLRHQHPVHTXHUXPFRQWUDWR
18
3RUWDQWRUHFRPHQGDVHHVWDEHOHFHUUHJUDVHVSHFt¿FDVFRQWUROHVHIRUPDV
GHLQIRUPDUDRWLWXODUFDQGLGDWRDQWHVGDFROHWDGRVGDGRVSHVVRDLVD
SROtWLFDGRSURFHVVRVHOHWLYRHTXHGLJDDRPHQRVTXDLVGDGRVSHVVRDLV
VmRQHFHVViULRVSDUDTXDLV¿QDOLGDGHVSRUTXDQWRWHPSRHVVHVGDGRVVHUmR
WUDWDGRVHVHKDYHUiFRPSDUWLOKDPHQWRFRPWHUFHLURV
2XVHMDSDUDDGHTXDUDEDVHGR³7UDEDOKH&RQRVFR´j/*3'pLPSRUWDQWH
TXHRFDQGLGDWRVHMDLQIRUPDGRHDFHLWHDVFRQGLo}HVSUHYLDPHQWH
HVWDEHOHFLGDVHPDOJXPPRPHQWRQRÀX[RGHFDGDVWUR,VVRSRUTXHR
UHFHELPHQWRGHFXUULFXOXPSRGHRFRUUHUSRUYiULDVIRUPDVPDVGHYHKDYHU
XPPRPHQWRHPTXHKDMDDFHQWUDOL]DomRHRFRQWUROH
'HYHVHWDPEpPOHPEUDUTXHSHODQRYD/HLRQGHKRXYHUXPDEDVH
GHGDGRVSHVVRDLVGHYHVHUDSOLFDGRRGHVFDUWHVHJXUR/RJRVHIRU
LPSUHVVRGHSRLVGRVHXXVRSDUDUHDOL]DUDOJXPDHQWUHYLVWDRXGLQkPLFD
pUHFRPHQGiYHOTXHVHMDIHLWDVXDHOLPLQDomRSLFRWDQGRRVSDSHLV2TXH
SHUFHEHPRVpTXHVHUiQHFHVViULDXPDPXGDQoDGHSURFHGLPHQWRVHGH
FXOWXUDQRDPELHQWHGHWUDEDOKR
DICA
4XDQGRRWLWXODUFOLHQWHXVDDPtGLDVRFLDOFRPRPHLRGHDXWHQWLFDomRSDUDVHUYLoRV
SDUDQmRSUHHQFKHUFDGDVWUR RSULPHLURFRQWDWRGDHPSUHVDSRGHVHUIHLWR
WDPEpPSHODUHGHVRFLDO9DOHUHVVDOWDUTXHRFOLHQWHWHUiTXHVHULQIRUPDGRVREUHDV
¿QDOLGDGHVIXWXUDVLQFOXVLYHSDUDQRYRVFRQWDWRVGRPHVPRControlador.
3DUDRXWUDV¿QDOLGDGHVVHUiSUHFLVRDQDOLVDUVHHVVDVHVWmRGHVFULWDVQDSUySULD
PtGLDVRFLDOHDFRPSDQKDURTXHHVWiDOLFRQWLGR3RUWDQWRRVGDGRVQmRSRGHUmR
VHUXWLOL]DGRVSDUDTXDOTXHU¿QDOLGDGHTXHQmRDH[SUHVVDTXDQGRRGDGRVHWRUQRX
S~EOLFRSHODPtGLDVRFLDO
1RVWHUPRVGRDUWžSDUiJUDIRžHPFDVRGHQRYD¿QDOLGDGHRFRQWURODGRU
GHYHUiLQIRUPDUDRWLWXODUFRPGHVWDTXHGHIRUPDHVSHFt¿FDGRWHRUGDVDOWHUDo}HV
SRGHQGRRWLWXODUQRVFDVRVHPTXHRVHXFRQVHQWLPHQWRpH[LJLGRUHYRJiORFDVR
GLVFRUGHGDDOWHUDomR
19
 ([LVWHPRXWURVGHVD¿RVFRPRSRUH[HPSORRWUDWDPHQWRGHGDGRVFRPRRV
DQWHFHGHQWHVFULPLQDLVH[DPHVPpGLFRVGHFODUDomRGH,PSRVWR
de RendaHVHXFRPSDUWLOKDPHQWRFRPHQWLGDGHVFRPSHWHQWHV
3RGHRFRUUHUDLQGDRFRPSDUWLOKDPHQWRGHGDGRVGRVFRODERUDGRUHVSDUD
FRQFHVVmRGHEHQHItFLRVFRPRVD~GHDOLPHQWDomRWUDQVSRUWHSUHYLGrQFLD
HQWUHRXWURVLQFOXLQGRLQIRUPDo}HVGRF{QMXJHHGHSHQGHQWHV9DOHUHVVDOWDU
TXHTXDQGRLVVRRFRUUHUSRUH[LJrQFLDOHJDOSDUDFXPSULPHQWRGRFRQWUDWR
GHWUDEDOKRRXOHJtWLPRLQWHUHVVHQmRKDYHUiQHFHVVLGDGHGHFRQVHQWLPHQWR
6mRPXLWRVRVFXLGDGRVGR5+DWpPHVPRFRPRXVRGDVIRWRVHLPDJHQV
GRVFRODERUDGRUHV2LGHDOpDWXDOL]DURCódigo de Conduta e o contrato
GHWUDEDOKREHPFRPRD3ROtWLFDGH%HQHItFLRVSDUDTXH¿TXHPFODURV
TXDLVGDGRVVmRFROHWDGRVVHKiFRPSDUWLOKDPHQWRFRPTXHPVHKi
LQWHUQDFLRQDOL]DomRGRVGDGRVHTXHKDYHUiWUDWDPHQWRWDPEpPSDUD
UHJLVWURGHDFHUYRKLVWyULFRHPHPyULDGDHPSUHVDFRPJXDUGDSHUPDQHQWH
(VWH~OWLPRLWHPpH[WUHPDPHQWHUHOHYDQWHSRLVKDYHUiGDGRVSHVVRDLV
FRPRUHJLVWURVGHLPDJHQVYtGHRVIRWRVHPHVPRGRFXPHQWRVTXH¿FDUmR
JXDUGDGRVQROHJDGRHQmRSRGHUmRVHUDSDJDGRV
5HFRPHQGDVHTXHDiUHDGH&RPSUDVSDVVHDWHUXPTXHVWLRQiULRSDUD
LGHQWL¿FDUVHQDTXHODFRQWUDWDomRKDYHUiFRPSDUWLOKDPHQWRGHGDGRV
SHVVRDLVHQHVVHFDVRDSOLTXHXPDQH[RDRFRQWUDWR
$OpPGLVVRWDPEpPGHYHVHUDWXDOL]DGRR7HUPRGH&RQ¿GHQFLDOLGDGH,
FRQKHFLGRSRUNDASDUDTXHWHQKDXPDFOiXVXODVREUHSURWHomRGHGDGRV
SHVVRDLVTXHVHUiDSOLFDGDSUHYLDPHQWHHPWRGDVDVUHXQL}HVHPTXHIRUHP
WURFDGDVLQIRUPDo}HVTXHFRQWHQKDPGDGRVSHVVRDLV,VVRGHYHRFRUUHU
DQWHVGHXPDFRQWUDWDomRVHMDQXPDUHODomRGHSHVVRDVMXUtGLFDVRXFRP
SHVVRDVItVLFDVHGHYHID]HUSDUWHGDURWLQDGDHPSUHVD
(PWRGRVRVFDVRVDFULDomRGHSROtWLFDVHSURFHGLPHQWRVDJUHJDGRVDRV
WUHLQDPHQWRVGHYHVHUSHUFHELGDFRPRXPDIRUPDGHPLWLJDUULVFRVH
FDSDFLWDURVIXQFLRQiULRVVREUHFRPRGHYHPSURFHGHUHPWRGRVRVHVWiJLRV
GDFROHWDGDVLQIRUPDo}HV

(PUHODomRjiUHDGH&RPSUDVWDOYH]HVWDVHMDDTXHOLGHFRPGDGRV
SHVVRDLVHPPHQRUTXDQWLGDGHH¿QDOLGDGH2SULQFLSDOSRQWRGHDWHQomR
pSDUDGDGRVUHODFLRQDGRVDRVSDUFHLURVHIRUQHFHGRUHVSHVVRDItVLFD
HQYROYLGDQDVWUDQVDo}HVFRQWUDWDGDVFRPRIXQFLRQiULRVGRVFRQWUDWDGRV
RXUHVSRQViYHLVRXUHSUHVHQWDQWHVGRVSUHVWDGRUHVGHVHUYLoRVTXH
FRQVWDPGRVFRQWUDWRV

0DVSRGHPRFRUUHUVLWXDo}HVTXHHQYROYDPFRPSDUWLOKDPHQWRGHGDGRV
SHVVRDLVFRPHVVHVWHUFHLUL]DGRVHPIXQomRGDDWLYLGDGHFRQWUDWDGDFRPR
SRUH[HPSORFRQWUDWDomRGHVHUYLoRVGHDUPD]HQDPHQWRRXDQiOLVHGH
GDGRV FRPRVHUYLoRGH³FORXG´ 3RUWDQWRQDFRQWUDWDomRGHRSHUDGRUHVRV
FRQWUDWRVGHYHUmRVHUDWXDOL]DGRVFRPFOiXVXODVHVSHFt¿FDVFRQVLGHUDQGR
DWULEXLomRGHUHVSRQVDELOLGDGHVHREULJDo}HVUHODFLRQDGDVjSURWHomR
GHGDGRVSHVVRDLV

 
 )RUPDUR&RPLWrGH3URWHomRGH'DGRV3HVVRDLVTXHSRGH
DSURYHLWDUXP&RPLWrMiH[LVWHQWHFRPRSRUH[HPSORR&RPLWrGH5LVFRV
POR ONDE COMEÇAR GH6HJXUDQoDRXGH4XDOLGDGHHDGLFLRQDUDQRYDSDXWDFDVRDLQGD
PRIMEIROS PASSOS PARA A QmRRWHQKDFULDGR
CONFORMIDADE.
/HYDQWDUR0DSDGH'DGRVH3URFHVVRVGH7UDWDPHQWR
de Dados Pessoais
7RGRSURMHWRGHLPSOHPHQWDomR
GHYHFRQVLGHUDUXPÀX[RPtQLPR $QDOLVDUDV¿QDOLGDGHVHWUDWDPHQWRVDSOLFDGRVDRVGDGRVSHVVRDLV
SDUDOHYDQWDPHQWRGHLQIRUPDo}HVH
FRQVHTXHQWHPHQWHLGHQWL¿FDomR (ODERUDUXP3ODQRGH$omRSDUDDGHTXDomRj/*3'FRPEDVHQRV
GHVHXFHQiULRLQWHUQR'HVWDIRUPD GDGRVHQDDQiOLVHUHDOL]DGD
SRGHUiWUDoDUXPSODQRGHDomR
SDUDLPSOHPHQWDomRHYHUL¿FDUVXD ,PSOHPHQWDUR3ODQRGH$omRLQFOXLQGRDGHTXDomRGRVSURFHVVRV
H¿FLrQFLDHSRVVLELOLGDGHGHDWHQGHU FULDomRGHUHJUDVHDWXDOL]DomRGHGRFXPHQWRVMXUtGLFRV
DXPFURQRJUDPDGHQWURGRSUD]R
GHDGHTXDomRGD/HL ,PSOHPHQWDU&DPSDQKDGH6HQVLELOL]DomRH&DSDFLWDomRGDV
(TXLSHV3URJUDPDGH3ULYDFLGDGHH3URWHomRGH'DGRV3HVVRDLV
&RPRSDVVRLQLFLDODHPSUHVDGHYH TXHSRGHVHUDGLFLRQDGRj&DPSDQKDGH6HJXUDQoDGD,QIRUPDomR 
$VDo}HVGHVHQVLELOL]DomRSRGHPVHUXPIDWRUFUXFLDOSDUDRVXFHVVRGD
1RPHDUR³(QFDUUHJDGR '32 ´IXQomRH[LJLGDSHOD/*3'HTXH LPSOHPHQWDomRGHXPSURMHWRGH/*3'WHQGRHPYLVWDTXHRIDWRUKXPDQR
SRGHVHUH[HUFLGDSRUSUR¿VVLRQDOLQWHUQRGDHPSUHVDSRUXPFRPLWr pXPDGDVPDLRUHVYXOQHUDELOLGDGHVSDUDYD]DPHQWRGHGDGRV
QRPHDGRXPOtGHURXPHVPRXPWHUFHLUL]DGR
5HDOL]DURPRQLWRUDPHQWRDFRPSDQKDUDHYROXomROHJLVODWLYDH
1mRKiXPDH[LJrQFLDOHJDOVREUHRVSUpUHTXLVLWRVSDUDDVVXPLUDIXQomRGR da Autoridade (ANPD)
'32QRHQWDQWRUHFRPHQGDVHFRQKHFLPHQWRGHOHLVWHFQRORJLDHVHJXUDQoD
GDLQIRUPDomR$HVWUXWXUDGHVXDHTXLSHHVXDSRVLomRQRRUJDQRJUDPDGD 5HDOL]DUDVUHXQL}HVSHULyGLFDVGR&RPLWr
HPSUHVDGHSHQGHUiGHFDGDSHU¿OHFXOWXUDGDSUySULDHPSUHVD5HFRPHQGD
VHDXWRQRPLDDR'32HTXHHOHVHUHSRUWHGLUHWDPHQWHjDOWDJHVWmR $SOLFDUOLo}HVDSUHQGLGDVHDWXDOL]Do}HVIXWXUDV

7RGRVRVSURFHVVRVHSURMHWRVTXHHQYROYDP'DGRV3HVVRDLVGHYHUmRSDVVDU
SHODDQiOLVHGHVXDHTXLSH

3URPRYHUXPZRUNVKRSLQLFLDOD¿PGHHQJDMDUWRGRV
RVSUR¿VVLRQDLVQDIDVHGHDQiOLVHHLPSOHPHQWDomRGD/*3'
GHQWURGDHPSUHVD

 
 3DUDDQiOLVHGHFHQiULRHGLDJQyVWLFRVXJHULPRVDVHJXLQWHWULOKD 'HSHQGHQGRGRSRUWHGDHPSUHVDVHUiSRVVtYHOHQHFHVViULREXVFDUXPQtYHO
GHPDWXULGDGHPDLVVHJXURDOpPGHRXWUDVLQIRUPDo}HV

 
 $VHJXLUH[HPSORGHOHYDQWDPHQWRGHGDGRV ([HPSORGHGDGRVFRQIRUPHDFDWHJRULDGRWLWXODU

2TXHSUHFLVRVDEHUVREUHDUPD]HQDPHQWR

 
 ([HPSORGH(QTXDGUDPHQWRGD)LQDOLGDGHGHEDVHOHJDO

Ex. Cadastro: Ex. Ações de marketing

Chassis e Placa - em mídias digitais;
identificação do compartilhamento
carro e dados com terceiros alheios
para cobrança. ao contrato

Prevenção à
Fraude e segurança
(fins de identificação
e autenticação)

Ex. Biometria Facial Ex. Biometria (art. 11,g), Ex. Coleta ou

para fins de Ex. Dados Ex. Tipagem saguínea Dados relacionados a utilização de
identificação ao relacionados à e informações sobre interesses reconhecimento
entrar no carro, caso saúde, em alergias para prestar particulares e facial, para
tenha sido adquirido processo socorro. íntimos, para fins identificar humor
como opcional na trabalhista de confirmação do titular
compra. de ID

*Marco Civil da Internet

 

PRIMEIROS PASSOS PARA
ATENDER À AUTORIDADE
NACIONAL DE PROTEÇÃO
DE DADOS PESSOAIS
&RQIRUPHSUHFHLWXDD/HLR
Encarregado (DPO) será o
UHVSRQViYHOSHODLQWHUORFXomRHQWUH
Controlador e ANPD - Autoridade
Nacional de Proteção de Dados
PessoaisPDVQmRTXHUGL]HUTXHHOH
VHMDR~QLFRUHVSRQViYHOSHODHODERUDomR
GRVGRFXPHQWRVQHFHVViULRV
7HUXPDHTXLSHSUHSDUDGDVHUiRGLIHUHQFLDOSRLVPHVPRREncarregado
SUHFLVDUiGHDSRLRHDX[tOLRGDVGHPDLViUHDV
$OpPGLVVRD$13'SRGHUiYHUL¿FDUDJUDYLGDGHGRLQFLGHQWHFDVR
QHFHVViULRSDUDDVDOYDJXDUGDGRVGLUHLWRVGRVWLWXODUHVHGHWHUPLQDU
ao ControladorDDGRomRGHSURYLGrQFLDVWDLVFRPRDPSODGLYXOJDomR
GRIDWRHPPHLRVGH&RPXQLFDomRHPHGLGDVSDUDUHYHUWHURXPLWLJDURV
HIHLWRVGRLQFLGHQWH
O ReportSDUDD$13'UHODFLRQDGRDXPGHWHUPLQDGRLQFLGHQWHSRGHVHU
EHPVHPHOKDQWHDR5HODWyULRGH,PSDFWRGHVGHTXHDWHQGDjVH[LJrQFLDVGR
$UWLJRGD/*3'
3RURXWURODGRLQGHSHQGHQWHGDRFRUUrQFLDGHXPLQFLGHQWHGHVHJXUDQoD
D$13'SRGHUiVROLFLWDUDRControlador, um 5HODWyULRGH,PSDFWR
à Proteção de Dados PessoaisTXHGHYHUiVHUHODERUDGRFRPEDVHQDV
H[LJrQFLDVGRSDUiJUDIR~QLFRGR$UWGD/*3'HGHYHUiFRQWHUQR
PtQLPRDGHVFULomRGRVWLSRVGHGDGRVFROHWDGRVDPHWRGRORJLDXWLOL]DGDSDUD
DFROHWDHJDUDQWLDGDVHJXUDQoDGDVLQIRUPDo}HVHDDQiOLVHGRControlador,
FRPUHODomRDPHGLGDVVDOYDJXDUGDVHPHFDQLVPRVGHPLWLJDomR
GHULVFRDGRWDGRV

$WHQGHUj$13'pPDLVXPGRVPXLWRVGHVD¿RVGD/*3'WHQGRHPYLVWDTXH
DSUySULD$XWRULGDGHDLQGDUHJXODPHQWDUiPXLWDVTXHVW}HVHGHYHUiGLULPLU
G~YLGDVODWHQWHVDWXDOPHQWH

'RLVSRQWRVVHUmRREULJDWyULRVHRControlador MiSRGHHGHYHHVWDU
SUHSDUDGRSDUDDWHQGHUDRGHYHUGHReportHVDEHUHODERUDURRelatório de
,PSDFWRj3URWHomRGH'DGRV3HVVRDLV 5,3' 

2SULPHLURSUHYLVWRQR$UWHVWDEHOHFHTXHQDRFRUUrQFLDGHXPLQFLGHQWH
GHVHJXUDQoDTXHSRVVDDFDUUHWDUULVFRRXGDQRUHOHYDQWHDRVWLWXODUHVGRV
GDGRVHVVHLQFLGHQWHGHYHUiVHUUHSRUWDGRj$13'HDRVWLWXODUHVHQYROYLGRV

1HVWHFDVRD/*3'IDODHPSUD]RUD]RiYHOTXHGHYHUiVHUGH¿QLGRSHOD
$13'HQTXDQWRDOHJLVODomRHXURSHLDGHWHUPLQDH[SUHVVDPHQWHKRUDV

&RPRMiPHQFLRQDGRHPRXWURVWUHFKRVGHVVD&DUWLOKDD/*3'DSUHVHQWDRV
SULQFLSDLVWySLFRV LQIRUPDo}HV TXHGHYHPFRQVWDUGR5HODWyULR

 31
 TEMPO DE ARMAZENAMENTO

$WUHODGRDRSULQFtSLRGDQHFHVVLGDGHVXUJH
DOLPLWDomRGHWHPSRQRDUPD]HQDPHQWR
GRVGDGRVSHVVRDLV1HVWHVHQWLGRRV
GDGRVSHVVRDLVVRPHQWHSRGHUmRVHU
DUPD]HQDGRVHQTXDQWRIRUHPQHFHVViULRV
SDUDDH[HFXomRGRFRQWUDWRFXPSULPHQWR
GHREULJDomROHJDOUHJXODWyULDRX
SDUDXVRH[FOXVLYRGRControlador,
YHGDGRVHXDFHVVRSRUWHUFHLURHGHVGH
TXHDQRQLPL]DGRV

$VHJXLUDSUHVHQWDPRVXPDVXJHVWmRGHJXDUGDSRUSUD]RPtQLPR1R
entanto, FDGDHPSUHVDGHYHHVWDEHOHFHUHGHWDOKDUVXDSUySULD
WDEHODGHWHPSRUDOLGDGHGDTXDOGHYHFRQVWDURWLSRGHGDGRFROHWDGR
¿QDOLGDGHWHPSRGHJXDUGDHHPEDVDPHQWROHJDO

$OHUWDPRVDLQGDTXHRVGDGRVSRGHPVHUWUDWDGRVSRUiUHDVGLVWLQWDVH
¿QDOLGDGHVGLYHUVDV3DUDXPDiUHDSRGHKDYHUMXVWL¿FDWLYDFRPRH[LJrQFLD
OHJDOHSDUDRXWUDSRGHRFRUUHUDQHFHVVLGDGHGHFROHWDURFRQVHQWLPHQWR
RXDPEDVDVKLSyWHVHVSRGHULDPRFRUUHUFRPEDVHOHJDO

'HTXDOTXHUIRUPDpSUHFLVRGLVWLQJXLODV iUHDVH¿QDOLGDGHV LQIRUPDUDR

WLWXODUHSURWHJHURVGDGRVGHYLGDPHQWH3RUH[HPSORWRPHPRVFRPREDVH
RVGDGRVGHELRPHWULDTXHVmRFROHWDGRVFRPD¿QDOLGDGHGHLGHQWL¿FDomR
GRSURSULHWiULRHIXQFLRQDPHQWRGHYHtFXORRXDFROHWDGRVPHVPRV
GDGRVSDUDDLGHQWL¿FDomRGRFOLHQWHDRHQWUDUQDFRQFHVVLRQiULD FRPR
RFRUUHHPSRUWDULDV 

 33
 4XHPWHPDFHVVRDRV'$'263(662$,6QDHPSUHVD"

eLPSRUWDQWHVDEHUTXHPWHPRXSRGHWUDWDUGDGRVSHVVRDLVFRPRSRU
ANEXO I H[HPSORRYHQGHGRUQDVFRQFHVVLRQiULDVTXHWHPDFHVVRDRVPyGXORVGH
PERGUNTAS E RESPOSTAS &50YLQFXODGRVDR'06HDRVFRQWUROHVHPRQLWRUDPHQWRGHTXDOLGDGHGH
DWHQGLPHQWRGDPRQWDGRUD

Apresentamos as principais perguntas e respostas para os pontos mais

1RXQLYHUVRDXWRPRELOtVWLFRVHUiQHFHVViULRFRQVLGHUDUWRGDDFDGHLD
LPSRUWDQWHVGD/*3'FRQIRUPHDVHJXLU
LQWHUDWLYDFRPRDVFRQFHVVLRQiULDVPRQWDGRUDVIRUQHFHGRUHVSUHVWDGRUHV
GHVHUYLoRV GHVSDFKDQWHVVHJXUDGRUDV¿QDQFHLUDVDJrQFLDVGH
4XHPVmRRV7,78/$5(6'('$'26QRXQLYHUVR
PtGLDVGLJLWDLVFHQWUDLVGHFRQWUROHVGHOHDGV HDLQGDFRODERUDGRUHV
DXWRPRELOtVWLFR"
UHODFLRQDGRVDRSURFHVVRGHPRQLWRUDPHQWRGDTXDOLGDGHHDWHQGLPHQWRDR
FOLHQWH1HVWH~OWLPRFDVRSRGHPRVFRQVLGHUHUDViUHDVGHYHQGDVHSyV
YHQGDVDOpPGRPDUNHWLQJHGHVHQYROYLPHQWRGHUHGH

6DEHPRVTXHRXQLYHUVHDXWRPRWLYHQmRVHOLPLWDDRVH[HPSORVXWLOL]DGRV
DFLPDHFDGDHPSUHVDGHYHID]HURVHXSUySULRRUJDQRJUDPDTXH
2VFOLHQWHVYHQGHGRUHVIXQFLRQiULRVLQWHUQRVIXQFLRQiULRVGHWHUFHLUL]DGDV
SRVVLELOLWDUiLGHQWL¿FDUTXDORÀX[RGDLQIRUPDomRHTXHPWHPDFHVVRDHOD
HQWUHRXWURVTXHWHQKDPYtQFXORGLUHWRRXLQGLUHWR

$OpPGRVH[HPSORVFLWDGRVQmRSRGHPRVHVTXHFHUTXHD/*3'WDPEpP
$/HLQmRVHDSOLFDDRVGDGRVGHSHVVRDMXUtGLFDQRHQWDQWRQRFRQWH[WRGD
DEUDQJHDADOS PESSOAIS e DADOS PESSOAIS SENSÍVEIS de
UHODomRMXUtGLFDHQWUHDVHPSUHVDVFDVRHQYROYDGDGRVSHVVRDLVRXVHQVtYHLV
IXQFLRQiULRVHWHUFHLUL]DGRVHQmRDSHQDVGRVFOLHQWHV
VHMDPGHIXQFLRQiULRVRXWHUFHLURVHVVHVHVWDUmRVREDSURWHomRGD/*3'

34 35
 4XDORYDORUGRVGDGRVGRVPHXVFOLHQWHV"3RUTXH
SUHFLVRSURWHJrORV"
1D6RFLHGDGHGRFRQKHFLPHQWRGDGRVWrPYDORUHFRQ{PLFR, pois,
GHDOJXPDIRUPDSRGHPJHUDUOXFUR e, nesse ponto, passam a ser
FKDPDGRVGHLQIRUPDomR,PDJLQHRVHXEDQFRGHGDGRVGHFOLHQWHVQDV
³PmRV´GRVHXFRQFRUUHQWH"
(TXDLVRVGDGRVDJUHJDPYDORUSDUDDVFRQFHVVLRQiULDVPRQWDGRUDVH
VHJXUDGRUDV"4XDQWRYDOHPHVVHVGDGRV",QIRUPDo}HVGHWHQGrQFLDVH
JRVWRVYLQFXODGRVDRSHU¿OGHXPFOLHQWHFRPFHUWH]DYDOHPPXLWR
3RUWDQWRRVGDGRVID]HPSDUWHGHWRGRQHJyFLRVHQGRQHVVHFRQWH[WRXP
YDOLRVRDWLYRHPSUHVDULDOHSRUWDQWRVHID]QHFHVViULDDVXDSURWHomR
Os Artigos 46 e 47, da LGPDVmRFODURVDRLQVWLWXLURdever de
proteção dos dados pessoaisLQFOXLQGRDQHFHVVLGDGHGHSURWHomR
WpFQLFDHFRPSRUWDPHQWDO
$OpPGLVVRSHQVDUQDProteção de Dados, desde o nascimento de um
SURMHWRD¿PGHDWHQGHUDR$UW†ž 3ULYDF\E\'HVLJQ HDFLPDGH
WXGRSUHYHQLUTXHUHDOPHQWHRFRUUDDOJXPLQFLGHQWH
3RUWDQWRHVVDSUHRFXSDomRID]SDUWHGHXPDEOLQGDJHPGH6HJXUDQoDGD
,QIRUPDomRH3URWHomRGH'DGRV3HVVRDLVLQFOXLQGRVHJXUDQoDMXUtGLFD
LPSOHPHQWDomRGHUHFXUVRVWpFQLFRVDGHTXDomRGRVGRFXPHQWRVH
VHQVLELOL]DomRGHWRGDVDViUHDVTXHGHYHPFRQWDUFRPDFDSDFLWDomRGH
VHXVSUR¿VVLRQDLV
36
4. Relação Controlador e Operador no Setor (Montadora,
'LVWULEXLGRU&RQFHVVLRQiULD)LQDQFHLUD6HJXUDGRUD 
$/*3'GH¿QHTXHRV Agentes de Proteção de Dados Pessoais VmRR
Controlador e o Operador. 1HVWHVHQWLGRTXDLVVHULDPRVDJHQWHVGH
SURWHomRGHGDGRVSHVVRDLVQRVHJPHQWRDXWRPRELOtVWLFR"
O ControladorpDTXHOHTXHWRPDDGHFLVmRRXVHMDGH¿QHTXDLVGDGRV
VHUmRFROHWDGRVRTXHGHYHUiVHUIHLWRFRPHOHVHSRUWDQWRTXDOWUDWDPHQWR
VHUiDSOLFDGR1HVWHFDVRRFRUUHRSULQFtSLRGDUHVSRQVDELOLGDGHTXH
demanda, do ControladorR5HJLVWURGHVXD&RQIRUPLGDGH/HJDOSDUD
FRPSURYDomRHPHYHQWXDO¿VFDOL]DomRSRUyUJmRVS~EOLFRV QR%UDVLO
DWXDOPHQWHDV¿VFDOL]Do}HVVmRIHLWDVSHOR0LQLVWpULR3~EOLFRGR'LVWULWR
)HGHUDOH7HUULWyULRVHSHORV352&21VGRV(VWDGRV 
$HPSUHVDTXHSURPRYHRWUDWDPHQWRGHGDGRVVREDLQVWUXomRGR
ControladorpDOperadora9DOHUHVVDOWDUTXHXPDHPSUHVDSRGH
VHUDRPHVPRWHPSR&RQWURODGRUDH2SHUDGRUD([HPSORXPD
HPSUHVDGH0tGLDV'LJLWDLVpControladoraGRSRQWRGHYLVWDGHGDGRV
GHVHXVIXQFLRQiULRVHOperadoraHPUHODomRjVFRQFHVVLRQiULDVHRX
PRQWDGRUDVTXHDFRQWUDWDP
$FRQFHVVLRQiULDp&RQWURODGRUDjPHGLGDHPTXHGH¿QHTXDLV
'DGRV3HVVRDLVHRX6HQVtYHLVGHYHPVHUFROHWDGRVHSDUDTXDO
¿QDOLGDGH-iRVWHUFHLURVHPSUHVDVFRQWUDWDGRVSDUDID]HUDFROHWD
DUPD]HQDPHQWRHDQiOLVHGRVGDGRVVmROperadores
eRFDVRGDVHPSUHVDVGHQWURGRSUySULRHFRVVLVWHPDTXHSRUIRUoD
GDUHODomRMXUtGLFDSURPRYHPRWUDWDPHQWRGHGDGRVHPQRPHGH
TXHPDVFRQWUDWRX
3DUDPHOKRUH[HPSOL¿FDUDGLIHUHQoDHQWUH&RQWURODGRU e Operador,
QRHFRVVLVWHPDDXWRPRELOtVWLFRXWLOL]DUHPRVD¿QDQFHLUDHDVHJXUDGRUD,
TXHVmRDPEDVControladorasXPDYH]TXHVHWUDWDGHFRQWUDWRGLUHWR
FRPRWLWXODUGRVGDGRVFOLHQWHDLQGDTXHVHMDSRULQWHUPpGLRGHXPD
FRQFHVVLRQiULD-iDHPSUHVDTXHID]DQiOLVHGHFRPSRUWDPHQWRGRV
FOLHQWHVGDFRQFHVVLRQiULDpOperadora
37
 7DPEpPSRGHKDYHUFRQFXUVRGHFRQWURODGRUHVRQGHPDLVGHXPDHPSUHVD
pFRQWURODGRUDGHEDVHVGHGDGRVSHVVRDLVTXH¿FDPUHSURGX]LGDVHP
WRGDV ([TXDQGRpFOLHQWHWDQWRGDFRQFHVVLRQiULDFRPRGD¿QDQFHLUD
HGDVHJXUDGRUD 

0DVOHPEUHVH7RGDHPSUHVDVHMDDFRQFHVVLRQiULDPRQWDGRUDRX
IRUQHFHGRUVmRControladores,VVRSRUTXHDLQGDTXHQmRFROHWHPRX
UHFHEDPGHWHUFHLURVGDGRVSHVVRDLVGHFRQVXPLGRUHVSRUFHUWRWrP
FRQWUROHVREUHRVGDGRVSHVVRDLVGHVHXVIXQFLRQiULRV

2XWURH[HPSORSUiWLFR8PDDJrQFLDGHPDUNHWLQJFRQWUDWDGDSHOD
FRQFHVVLRQiULDSDUDWUDEDOKDUREDQFRGHGDGRVSHVVRDLVGRV
clientesTXHMiWHQKDPFRPSUDGRYHtFXORVHRXVHUYLoRVQDFRQFHVVLRQiULD
QRSDVVDGR1HVVHFDVRHQTXDQWRDFRQFHVVLRQiULDpD&RQWURODGRUD, a
DJrQFLDGHPDUNHWLQJpD2SHUDGRUD

Apenas será considerado OperadorDTXHOHTXHUHFHEHRVGDGRVRXTXH

SURPRYHVHXWUDWDPHQWRLQFOXLQGRDFROHWDHPQRPHGHWHUFHLURV
$¿QDQFHLUDGLVWULEXLGRUDVHJXUDGRUDQmRVmRRSHUDGRUHVWHQGRHP
YLVWDTXHQmRSURPRYHPRWUDWDPHQWRXPDHPQRPHGDVRXWUDVPDV
VmRQHJyFLRVDXW{QRPRVHOLJDGRVHQWUHVLGHIRUPDTXHQDSUiWLFD
SRGHRFRUUHURFRPSDUWLOKDPHQWRHQmRXPDVXERUGLQDomRRQGHKiR
Controlador e o Operador
(PUHVXPR
3RUTXHpLPSRUWDQWHVDEHUD)LQDOLGDGHGD&ROHWD
GRV'DGRV3HVVRDLV"
8PGRVIDWRUHVPDLVLPSRUWDQWHVGD/*3'pHVWDEHOHFHUDFinalidade da
Coleta de Dados PessoaisRXVHMDSDUDTXHVHUiXVDGRRGDGRSHVVRDO
FROHWDGRXPDYH]TXHHVVHXVRVHUiGHWHUPLQDQWHSDUDLGHQWL¿FDU
DMXVWL¿FDWLYDGHWUDWDPHQWRTXDOEDVHOHJDOLUiSHUPLWLURVHXXVR
GHIRUPDDGH¿QLUVHKDYHUiQHFHVVLGDGHRXQmRGD&ROHWDGR
&RQVHQWLPHQWRRXVHDTXHOHXVRSRGHVHUIHLWRFRPEDVHHPXPD
([FHomRGH&RQVHQWLPHQWRWUD]LGDSHODSUySULD/HL

$VKLSyWHVHVTXHMXVWL¿FDPR7UDWDPHQWRGH'DGRV3HVVRDLVVmR
&RQVHQWLPHQWRWHUSHUPLVVmRHVSHFt¿FDSDUDDTXHOD¿QDOLGDGH
2$UWLQF;,,GH¿QHR&RQVHQWLPHQWRFRPRDOLYUHPDQLIHVWDomR
LQIRUPDGDHLQHTXtYRFDSHODTXDORWLWXODUFRQFRUGDFRPRWUDWDPHQWRGH
seus Dados PessoaisSDUDXPD¿QDOLGDGHGHWHUPLQDGD

,VWRTXHUGL]HUTXHR&RQVHQWLPHQWRWHPTXHGHPRQVWUDUHUHÀHWLU
¿HOPHQWHDYRQWDGHGRWLWXODU3RUWDQWRGHYHVHUXPDDomRSRVLWLYDH

38 39
 QmRLPSRVLWLYDGHIRUPDTXHDV³IDPRVDV´FDL[DVGHDFHLWHSUHYLDPHQWH
SUHHQFKLGDVVHUmRFRQVLGHUDGDVQXODV
Livre2&RQVHQWLPHQWRQmRSRGHVHUFRQFHGLGRPHGLDQWHFRDomRRX
LPSRVLomRGRFRQWURODGRU
,QIRUPDGR$JUHJDGRDRSULQFtSLRGDWUDQVSDUrQFLDWUDWDVHGD
necessidade de LQIRUPDUDRWLWXODUSUHYLDPHQWHVREUHR
WUDWDPHQWRDVHUDSOLFDGRDRVHXGDGREHPFRPRDVFRQVHTXrQFLDVGR
VHXDFHLWHRXQmR
,QHTXtYRFR7UDWDVHGDFRPSURYDomRGDYRQWDGHGRWLWXODU
'HWDOKHPXLWRLPSRUWDQWHpTXHGHYHUiVHULQIRUPDGRFRPRRWLWXODU
SRGHUiH[HUFHUVHXGLUHLWRGHUHYRJDURFRQVHQWLPHQWR
2FDVRSRGHHVWDUWDPEpPGHQWURGDVKLSyWHVHVGHExceção de
&RQVHQWLPHQWRTXDLVVHMDP SDUWHVDMXt]RRXVHMDjEXVFDGHVROXomRSHORMXGLFLiULR1HVWHFRQWH[WR
• &XPSULPHQWRGHREULJDomROHJDORXUHJXODWyULDSHOR
Controlador7UDWDVHGDFROHWDGRGDGRSRUXPDH[LJrQFLDOHJDORX
VHMDH[LJLGDSRUGHWHUPLQDGD/HL'HFUHWR0HGLGD3URYLVyULD5HVROXomR
HWF3RGHPRVXWLOL]HUFRPRH[HPSORDSOLFiYHODWRGDVDVHPSUHVDVR
Marco Civil da InternetTXHH[LJHRDUPD]HQDPHQWRGHGDGRV
SHVVRDLVTXHLGHQWL¿TXHPRWLWXODUXVXiULRSHORSUD]RGH
VHLVPHVHVSDUDSURYHGRUHVGHDSOLFDWLYRVHGHXPDQRSDUD
provedores de conexão
$VHPSUHVDVGRUDPRDXWRPRELOtVWLFRGHYHUmRYHUL¿FDUDTXDLVOHLVHVWmR
VXMHLWDVHSURPRYHUXPDDQiOLVHFRPEDVHHPWRGRVRVGDGRVFROHWDGRV
• 3HODDGPLQLVWUDomRS~EOLFDSDUDR7UDWDPHQWRHXVR
FRPSDUWLOKDGRGHGDGRVQHFHVViULRVjH[HFXomRGHSROtWLFDV
S~EOLFDVSUHYLVWDVHP/HLVH5HJXODPHQWRVRXUHVSDOGDGDVHP
&RQWUDWRV&RQYrQLRVRX,QVWUXPHQWRV&RQJrQHUHV titular ou do terceiro:
Somente a DGPLQLVWUDomRS~EOLFDGHIRUPDGLUHWDHDWXDQGRFRPR
ControladoraSRGHUHDOL]DU7UDWDPHQWRVGH'DGRV3HVVRDLVVRE
HVVDEDVHOHJDO$LQGDTXHDWXDQGRQDH[HFXomRGHSROtWLFDVS~EOLFDV

DVRUJDQL]Do}HVSULYDGDVQmRSRGHULDPXWLOL]DUHVVDEDVHOHJDOFRPR
MXVWL¿FDWLYDSDUDR7UDWDPHQWRGH'DGRV3HVVRDLV
• ([HFXomRGH&RQWUDWRRXGHSURFHGLPHQWRVSUHOLPLQDUHV
UHODFLRQDGRVD&RQWUDWRGRTXDOVHMDSDUWHRWLWXODUHDSHGLGRGR
titular dos dados:
5HIHUHVHDR7UDWDPHQWRGH'DGRV3HVVRDLVFRPEDVHQDVLQIRUPDo}HV
QHFHVViULDVSDUDH[HFXWDURVHUYLoRFRQWUDWDGR3RUH[HPSOR$R
DGTXLULUXPSODQRGHFRQVyUFLRSDUDDTXLVLomRGHXPDXWRPyYHOQRYR
D¿PGHSDUWLFLSDUGRVVRUWHLRVPHQVDLVVHUiQHFHVViULDDLGHQWL¿FDomR
GRFRQVRUFLDGRDVVLPFRPRRFRQWDWRFRPHOHSDUDLQIRUPiORVREUH
VXDFRQWHPSODomR
• ([HUFtFLRUHJXODUGHGLUHLWRVHPSURFHVVRMXGLFLDO
DGPLQLVWUDWLYRRXDUELWUDO
7RGDUHODomRHVWiVXMHLWDDGHVHQWHQGLPHQWRVRXRFRUUrQFLDVTXHOHYHPDV
RVGDGRVSRGHPVHUDUPD]HQDGRVVHPRFRQVHQWLPHQWRGRWLWXODUSDUDD
¿QDOLGDGHGHXWLOL]DomRHPSURFHVVRVMXGLFLDLVRXSRUH[HPSORHPXP
SURFHVVRDGPLQLVWUDWLYHSURYHQLHQWHGHyUJmRVS~EOLFRVRXSDUDDVROXomRGH
FRQÀLWRVSRUDUELWUDJHP
• 5HDOL]DomRGHHVWXGRVSRUyUJmRVGHSHVTXLVD
(PERUDRSUySULRWtWXORMiVHMDDXWRGHVFULWLYRUHVVDOWDPRVTXHVHJXQGRD
/*3'HQWHQGHVHFRPRÏUJmRGH3HVTXLVDHQWLGDGHGDDGPLQLVWUDomR
S~EOLFDGLUHWDRXLQGLUHWDRXSHVVRDMXUtGLFDGHGLUHLWRSULYDGRVHP¿QV
OXFUDWLYRVOHJDOPHQWHFRQVWLWXtGDVREDVOHLVEUDVLOHLUDVFRPVHGHHIRUR
QR3DtVTXHLQFOXDHPVXDPLVVmRLQVWLWXFLRQDORXHPVHXREMHWLYRVRFLDO
RXHVWDWXWiULRDSHVTXLVDEiVLFDRXDSOLFDGDGHFDUiWHUKLVWyULFRFLHQWt¿FR
WHFQROyJLFRRXHVWDWtVWLFR
• 3URWHomRjYLGDRXGDLQFROXPLGDGHItVLFDGR
/LJDGRGLUHWDPHQWHFRPDSURWHomRGRLQWHUHVVHHVVHQFLDOjYLGDGH
TXDOTXHUSHVVRDQDWXUDOItVLFD
41
 • 7XWHODGDVD~GH $SULQFLSDOHPDLVVHJXUDMXVWL¿FDWLYDQRkPELWRSULYDGRUHIHUH
$XWRH[SOLFDWLYRTXDQGRVHIDODHPWXWHODUDVD~GHPDVHVWDMXVWL¿FDWLYD VHjFinalidade de Execução do ContratoSRLVDLQGDTXHH[LVWD
DSOLFDVHHVSHFL¿FDPHQWHSHODXWLOL]DomRGHSUR¿VVLRQDLVGDiUHDGDVD~GH HPEDVDPHQWRQROHJtWLPRLQWHUHVVHHVVHDOpPGHVHUXPDODFXQDSDUD
GLVFXVV}HVVREUHRTXHUHDOPHQWHVHULDROHJtWLPRLQWHUHVVHSHUPLWH
• ,QWHUHVVHOHJtWLPRGR&RQWURODGRURXGRWHUFHLUR TXHD$XWRULGDGH1DFLRQDOUHTXHLUDXP5HODWyULRGH,PSDFWR
2OHJtWLPRLQWHUHVVHSRGHVHUGR&RQWURODGRUGRVWLWXODUHVRXGHXPD SHORControlador
FROHWLYLGDGHFRPRDSUySULDVRFLHGDGH7HPVLGRPXLWRXWLOL]DGRSDUD
KLSyWHVHGHEDVHVOHJDGDVHPTXHKiXPDDQWHULRULGDGHQDUHODomRHXPD 8PSRQWRMiPHQFLRQDGRDQWHULRUPHQWHDERUGDRIDWRGHTXHainda
MXVWL¿FDWLYDSODXVtYHOPDVVHXXVRQmRSRGHVHULQGLVFULPLQDGR TXHH[LVWDXPDMXVWL¿FDWLYDQDVKLSyWHVHVDQWHULRUHVGHIRUPDTXH
3RULVVRSUHVVXS}HDSRVVLELOLGDGHGHVHUH[LJLGRRelatório de MXVWL¿TXHDFROHWDGHGDGRVVHPR&RQVHQWLPHQWRGRWLWXODUserá
,PSDFWRSHOD$13''HVWDFDVHTXHROHJtWLPRLQWHUHVVHQmRVH necessário atender ao princípio da TransparênciaSUHYLVWRQR$UW
DSOLFDDR7UDWDPHQWRGH'DGRV6HQVtYHLVPDVWmRVRPHQWHDRV HGHYHVHSRUWDQWRDSUHVHQWDULQIRUPDo}HVFODUDVHH[DWDVDRVWLWXODUHVGRV
Dados Pessoais, e o ControladorGHYHDGRWDUPHGLGDVSDUDJDUDQWLU GDGRVDQWHVGDFROHWD
WUDQVSDUrQFLDQRWUDWDPHQWRGRVGDGRVSHVVRDLV
$VVLPUHFRPHQGDPRVTXHDFinalidade de Uso dos Dados seja
• 3URWHomRGRFUpGLWR apresentadaVHPSUHGHPRGRHYLGHQFLDGRSDUDTXHQmRUHVWHP
27UDWDPHQWRGH'DGRV3HVVRDLVSDUD3URWHomRGR&UpGLWRpXPD G~YLGDVSHUDQWHjVDXWRULGDGHVDRPHUFDGRHDRSUySULRWLWXODUGRV
H[FHomRFRQVLGHUDQGRDyWLFDGHSURWHomRGRSUySULRRIHUWDQWHRQGH GDGRVSHVVRDLVTXDQWRjWUDQVSDUrQFLDQDUHODomRHQWUHRUHVSRQViYHOSHOR
VmRQHFHVViULDVLQIRUPDo}HVSDUDLGHQWL¿FDomRHDQiOLVHGHSHU¿ODOpP WUDWDPHQWRHRWLWXODUGRVGDGRVSHVVRDLV
GHKDYHUXPDSURWHomRFROHWLYDGRFUpGLWRGHYLGRjJHVWmRGHULVFRHGR
FXVWRGHVVHFUpGLWR $OHUWDPRVWDPEpPSDUDDQHFHVVLGDGHGHPLQLPL]DomRH
proporcionalidade no 7UDWDPHQWRGH'DGRV3HVVRDLV/HPEUDPRV
• *DUDQWLDGH3UHYHQomRjIUDXGHHjVHJXUDQoDGRWLWXODU TXHRWUDWDPHQWRGHGDGRVHQJOREDWRGRVRVWLSRVGHXVRVHGHVWLQDo}HVDRV
-XVWL¿FDVHR7UDWDPHQWRGH'DGRV3HVVRDLV6HQVtYHLVSDUDSUHYHQomR GDGRVSHVVRDLVGHVGHDFROHWDDUPD]HQDPHQWRXVRFRPSDUWLOKDPHQWR
jIUDXGHQRVSURFHVVRVGHLGHQWL¿FDomRHDXWHQWLFDomRGHFDGDVWURHP DWpRGHVFDUWHHOLPLQDomR$TXLQRVGHSDUDPRVFRPRPrincípio da
VLVWHPDVHOHWU{QLFRV RTXHLQFOXLELRPHWULDUHFRQKHFLPHQWRIDFLDORXWURV  NecessidadeQRTXDOVRPHQWHRVGDGRVSHVVRDLVHVWULWDPHQWHQHFHVViULRV
YLVDQGRDSURWHomRGRSUySULRWLWXODUHGHVXDVHJXUDQoDYLVWRTXHKi SDUDRFXPSULPHQWRGDV¿QDOLGDGHVOHJLWLPDGDVMXQWRDRWLWXODUpTXH
QHFHVVLGDGHGDVXDLGHQWL¿FDomRRXPHVPRGDVXDSURWHomRFDVRDSHVVRD SRGHUmRGHIDWRVHUWUDWDGRVGHPRGROHJtWLPR
LGHQWL¿FDGDQmRVHMDRWLWXODU 
1mRVHSRGHSRUH[HPSORH[LJLUDFROHWDHXVRGHGDGRVGHUHOLJLmRSDUDD
$ROHYDQWDUD¿QDOLGDGHGDFROHWDVHUiSRVVtYHOLGHQWL¿FDUDVMXVWL¿FDWLYDV FRPSUDGHXPYHtFXORQDFRQFHVVLRQiULDSRLVDFROHWDGHVVHGDGRIRJHDR
legaisTXHSHUPLWHPR7UDWDPHQWRGH'DGRV3HVVRDLV&DVRD REMHWLYRSULQFLSDOGRQHJyFLR
MXVWL¿FDWLYDQmRVHHQTXDGUHHPXPDGDVKLSyWHVHVSUHYLVWDVQRV$UWLJRVH
DSDUWLUGRLQFLVR,,RXDLQGDGR$UWTXDQGRVHWUDWDUGDFROHWD
de dados de crianças ou adolescentes, será necessária a Coleta
GR&RQVHQWLPHQWR

 43
 3RUTXHpLPSRUWDQWHVDEHUVHKiFRPSDUWLOKDPHQWRGHGDGRV
SHVVRDLVFRPRXWUDVHPSUHVDV"
O &RPSDUWLOKDPHQWRGH'DGRVSUHVVXS}HDOJXQVFXLGDGRV
SULQFLSDOPHQWHQDFRQWUDWDomRSRLVVDEHUTXHPVHUiFRQWUDWDGRHRQtYHO
GHVHJXUDQoDRIHUHFLGRpHVVHQFLDO(PFDVRGHLQFLGHQWHSRUYD]DPHQWR
GHGDGRVH[LVWHRULVFRGHFDXVDUGDQRVDRVWLWXODUHVHWDPEpPGH
DIHWDUGLUHWDPHQWHDUHSXWDomRGRControladorDOpPGHOKHFDXVDU
SHUGDV¿QDQFHLUDV
$OpPGLVVRD/*3'SUHYrDOJXPDVUHJUDVHQWUHHODVo dever de
LQIRUPDUDRWLWXODUGRVGDGRVTXHVHUiIHLWRR&RPSDUWLOKDPHQWR
GHVHXVGDGRVFRPWHUFHLURVEHPFRPRSDUDTXDO¿QDOLGDGHVHGHVWLQD
Dependendo do caso, pode ser necessário o &RQVHQWLPHQWRGRWLWXODU
9HMDRTXHGL]RDUW†ž
O controlador, que obteve o consentimento, referido no inciso I
do caput deste artigo, que necessitar comunicar ou compartilhar
dados pessoais, com outros controladores, deverá obter
FRQVHQWLPHQWRHVSHFt¿FRGRWLWXODUSDUDHVVH¿PUHVVDOYDGDVDV
hipóteses de dispensa do consentimento, previstas nesta Lei.
No caso de Dados SensíveisVHR&RPSDUWLOKDPHQWRWLYHUSRUREMHWLYR
YDQWDJHPHFRQ{PLFDSRGHUiVHUREMHWRGHYHGDomRRXGHUHJXODPHQWDomR
SRUSDUWHGD$XWRULGDGH1DFLRQDO
eSUHFLVRWDPEpPPXLWDDWHQomRSRLVFDVRRWLWXODU revogue o
&RQVHQWLPHQWRGDGRDQWHULRUPHQWH, o ControladorGHYHUi
FRPXQLFDURVDJHQWHVFRPRVTXDLVWHQKDFRPSDUWLOKDGRRVGDGRV
Art. 18 - § 6º O responsável deverá informar, de maneira
imediata, aos agentes de tratamento com os quais tenha
realizado uso compartilhado de dados, a correção, a eliminação,
a anonimização ou o bloqueio dos dados, para que repitam
idêntico procedimento, exceto nos casos em que esta comunicação
44
seja, comprovadamente, impossível ou implique esforço
desproporcional.
$OpPGRVFXLGDGRVHPUHODomRjVLQIRUPDo}HVSUHVWDGDVDRWLWXODURXj
FROHWDGR&RQVHQWLPHQWRTXDQGRQHFHVViULRVHUiSUHFLVRDWHQWDUVHj
QHFHVVLGDGHGHDMXVWHVHDGHTXDo}HVGRVFRQWUDWRVRQGHRVHUYLoRHQYROYHUR
&RPSDUWLOKDPHQWRGH'DGRV3HVVRDLV
6PDUWH,$±'DGRVFDSWXUDGRVQDLQWHUDomRGRVYHtFXORVFRP
XVXiULRVH6PDUW&LWLHV±GHVD¿RVSDUDD&RQIRUPLGDGH
&RPRUiSLGRDYDQoRGDVWHFQRORJLDVPXLWRVVLVWHPDVMiSURPRYHPDFROHWD
GHGDGRVGHIRUPDLQWHOLJHQWHLQFOXVLYHFRPDXWLOL]DomRGHVROXo}HVGH
,QWHOLJrQFLD$UWL¿FLDOFRPDOJRUtWLPRVSDUDOHYDQWDUPXLWRPDLVLQIRUPDo}HV
VREUHRVWLWXODUHVHXVXiULRVGRVYHtFXORV
$OpPGLVVRFRPRXVRGHGLVSRVLWLYRVFRP,R7 LQWHUQHWGDVFRLVDV HP
XPFRQWH[WRGH&LGDGHV,QWHOLJHQWHV 6PDUW&LWLHV VHUiSRVVtYHOWHUPXLWR
PDLVGDGRVSDUDRVHWRU$XWRPRELOtVWLFRGHPRELOLGDGHXUEDQDGHYDUHMR
GHVHJXURV¿QDQFHLUDHQWUHRXWURV1HVWHFRQWH[WRpLPSRUWDQWHTXHDV
SROtWLFDVGHSULYDFLGDGHVHMDPEHPGH¿QLGDVHTXHRFRQWUDWRGHYHQGDWHQKD
SUHYLVmRH[SUHVVDHPUHIHUrQFLDDRWUDWDPHQWRGHWDLVGDGRVLQFOXLQGR
FROHWDVIXWXUDVGHVGHTXHVHMDSRVVtYHOSUHYHUDV¿QDOLGDGHV
$OpPGLVVRWHPRVGHVWDFDGRTXHDRUJDQL]DomRGDVEDVHVGHGDGRV
GHYHVHUIHLWDMiGLIHUHQFLDQGRDEDVHSULPiULDGDEDVHVHFXQGiULD,
HMiFULDQGRXPDFDPDGDGHSURWHomRUHODFLRQDGDDRVHJUHGRGHQHJyFLRV
45
 4XDLVVmRDVEDVHVGHGDGRVTXHSRGHPVHUXWLOL]DGDVGHIRUPD
OLYUHVHPRSHGLGRGH&RQVHQWLPHQWR"
3RUFHUWRTXHYiULRVGDGRVSHVVRDLVVmRGHXVRFRPXPHPGLYHUVDV
HPSUHVDVHiUHDVLQWHUQDVPDVSRGHPREYLDPHQWHWHU¿QDOLGDGHVGLVWLQWDV
Como mencionado anteriormente, QHPVHPSUHVHUiSUHFLVRFROHWDU
R&RQVHQWLPHQWRHPERUDSHUPDQHoDRGHYHUGHDWHQGHUDR
princípio da Transparência.
$VKLSyWHVHVGHXVRVHPDQHFHVVLGDGHGH&RQVHQWLPHQWRHVWmRHOHQFDGDV
QRSUySULR$UWžLQFLVRV,,D;HQRDUWLJRWDPEpPLQFLVRV,,D;WRGDV
MiPHQFLRQDGDVQRLWHP
'HVWDFDVHSRUWDQWRTXHWRGDVDVKLSyWHVHVGHSHQGHPGD¿QDOLGDGHGH
XVR3RURXWURODGRH[LVWHPGDGRVTXHVmRGHOLYUHDFHVVRRXVHMDTXH
SRGHPVHUXWLOL]DGRVLQGHSHQGHQWHGHVHHQTXDGUDUHPXPDGDVKLSyWHVHV
GR$UWž7UDWDVHGRV'DGRV$QRQLPL]DGRVDTXHOHVTXHQmRSRGHP
VHUPDLVUHYHUWLGRVHQmRSHUPLWHPDLGHQWL¿FDomRGHTXDOTXHUWLWXODU
2SURFHVVRGHDQRQLPL]DomRQmRSRGHVHUSDVVLYRGHUHYHUVmRSRUWDQWR
GDGRVHVWDWtVWLFRVPpWULFDVHQWUHRXWURVSRGHPVHUXWLOL]DGRVOLYUHPHQWH
LQFOXVLYHFRPSDUWLOKDGRV
$WHQomRSDUDGDGRVFROHWDGRVHPPtGLDVVRFLDVSRLVHVWHVQHPVHPSUHVmR
OLYUHVSDUDTXDOTXHUWLSRGHXWLOL]DomR
1mRpSRUTXHRVGDGRVHVWmRGLVSRQtYHLVTXHSRGHUmRVHUXWLOL]DGRVSRU
WHUFHLURVDVVLPFRPRDIRWRTXHSRVVXLDOpPGDSURWHomRFRQVWLWXFLRQDO
RFDUiWHUGHGDGRSHVVRDO7HOHIRQHVHHPDLOVSRUH[HPSORPHQFLRQDGRV
HPSRVWVGHFRQYHUVDVHQWUHDPLJRVQmRHVWmRDXWRUL]DGRVSDUDYDUUHGXUD
HWUDWDPHQWRSRUWHUFHLURVDQmRVHUTXHVHMDPGLVSRQLELOL]DGRVSDUD
HVWD¿QDOLGDGHRXTXHDSHVDUGH¿QDOLGDGHGLYHUVDWHQKDPVLGR
DXWRUL]DGRVSDUDHVVH¿P
$/HLSUHYrDSRVVLELOLGDGHGHXVRGHGDGRVSHVVRDLVDSDUWLUGHIRQWHV
S~EOLFDVPDVGHVGHTXHRWUDWDPHQWRVHMDFRP¿QDOLGDGHFRPSDWtYHO
46
(VVDVLWXDomRpGLIHUHQWHGHXPDLQIRUPDomRGHWHOHIRQHHHPDLOGH
XPDSODWDIRUPDRQGHRWLWXODUDXWRUL]RXGHL[DUDLQIRUPDomRDEHUWD
SRLVTXHUUHFHEHUFRQWDWRVGHSHVVRDVHVSHFLDOPHQWHSDUDPDQWHU
UHODo}HVSUR¿VVLRQDLVRTXHSHUPLWHDERUGDJHQVSDUDSURSRVWDVGH
WUDEDOKRSRUH[HPSOR
eLPSRUWDQWHGLVWLQJXLUIRQWHVS~EOLFDVGHLQIRUPDomRS~EOLFD$/*3'
QmRID]PHQomRH[SUHVVDDIRQWHVS~EOLFDVPDVWmRVRPHQWHDLQIRUPDo}HV
WRUQDGDVS~EOLFDVPDQLIHVWDPHQWHSHORWLWXODU3RUWDQWRH[LJHXPDDomR
SURDWLYDGRWLWXODUHGHYHHVWDUGLVSRQtYHOSRUVXDSUySULDYRQWDGH
O Art. 7, § 4º dispõe: É dispensada a exigência do Consentimento,
previsto no caput deste artigo para os dados tornados públicos,
manifestamente, pelo titular dos dados, resguardados seus direitos e os
princípios previstos nesta Lei.
$OpPGLVVRD/HLUHVJXDUGDRVGLUHLWRVGRVWLWXODUHVEHPFRPRRVSULQFtSLRV
GR$UWž(PRXWUDVSDODYUDVDEDVHGHXVRHVWiQD¿QDOLGDGHHGHYH
DWHQGHUDRSULQFtSLRGDTransparênciaPLQLPL]DomRHQWUHRXWURV
9DPRVXWLOL]DUXPH[HPSORSUiWLFRSDUDTXDO¿QDOLGDGHXPDSHVVRDFULD
SHU¿OHPXPDUHGHVRFLDOGHUHODFLRQDPHQWR"&HUWDPHQWHQmRpSDUD
UHFHEHURIHUWDGHYHtFXORVPDVVLPSDUDHQFRQWUDUQRYRVDPLJRV1HVWH
caso, dados como QRPH,IRWR e contatoSRGHPHVWDUGLVSRQtYHLVSDUD
RXWURVPHPEURV3DUDTXHXPYHQGHGRUXWLOL]HHVVHVGDGRVSDUD¿QV
comerciais, será preciso o &RQVHQWLPHQWRGRWLWXODU
$TXHPSHUWHQFHPRVGDGRV"
8PDG~YLGDPXLWRFRPXPSDUDHPSUHVDVGHTXDOTXHUVHJPHQWRpVREUHD
SURSULHGDGHGRVGDGRV$SULQFtSLRRGDGRSHUWHQFHDRVHXWLWXODUSRUWDQWR
QmRSHUWHQFHjFRQFHVVLRQDULDjPRQWDGRUDRXj¿QDQFHLUDHWF
O &RQWURODGRUSRGHVHURSURSULHWiULRGDEDVHGHGDGRV,
FRQVLGHUDQGRRYDORUGDLQIRUPDomRDOLFRQWLGDPDVQmRGHFDGD
dado por si,WHQGRHPYLVWDTXHRSUySULRWLWXODUWHPDJHUrQFLDGH
47
 VHXVGDGRVTXDQGRQmRIRUHPDUPD]HQDGRVSHODVKLSyWHVHVH[FOXGHQWHV &50H'06±&RPRWUDEDOKDUDLQWHJUDomRGDV%DVHVGH'DGRV
GHFRQVHQWLPHQWR de Concessionárias e Montadoras
/HPEUHVHGHTXHRWLWXODUWHPRGLUHLWRGHUHYRJDUR
&RQVHQWLPHQWRHWDPEpPGHSHGLUDHOLPLQDomRGRVVHXVGDGRVFRP
EDVHQR$UWGD/*3'

No entanto, o ControladorGHYHDWHQWDUVHjVH[FHo}HVGRDUWTXH
SUHYrDPDQXWHQomRGRVGDGRVPHVPRDSyVWpUPLQRGD¿QDOLGDGHLQLFLDORX
SHGLGRGHDSDJDPHQWRFRQIRUPHGHVFULWRDVHJXLU

,FXPSULPHQWRGHREULJDomROHJDORXUHJXODWyULDSHOR&RQWURODGRU

,,HVWXGRSRUyUJmRGHSHVTXLVDJDUDQWLGDVHPSUHTXHSRVVtYHOD
$QRQLPL]DomRGRVGDGRVSHVVRDLV

,,,WUDQVIHUrQFLDDWHUFHLURGHVGHTXHUHVSHLWDGRVRVUHTXLVLWRVGH
WUDWDPHQWRGHGDGRVGLVSRVWRVQHVWD/HLRX

,9XVRH[FOXVLYRGR&RQWURODGRUYHGDGRVHXDFHVVRSRUWHUFHLURHGHVGH
TXH$QRQLPL]DGRVRVGDGRV

$LQWHJUDomRGDEDVHGHGDGRVHQWUHHPSUHVDVGLVWLQWDVSUHVVXS}H
OHYDQWDPHQWRGDV¿QDOLGDGHV1HVWHFDVRVHUiQHFHVViULRYHUL¿FDUVHDV
HPSUHVDVFRPSDUWLOKDPGDGRVHQTXDQWRControlador e Operador,
ouDSHQDVSHODH[HFXomRGHFRQWUDWRVGLVWLQWRVRQGHDPERVVmR
ControladoresHPERUDVHMDUHIHUHQWHDXPDPHVPDYHQGD(VVHpRFDVR
GR¿QDQFLDPHQWRRQGHRWLWXODU¿UPDFRQWUDWRFRPDFRQFHVVLRQiULDHFRPD
LQVWLWXLomR¿QDQFHLUD

1RHQWDQWRTXDQGRRWLWXODU¿UPDFRQWUDWRFRPDFRQFHVVLRQiULDDRID]HU
DFRPSUDGHXPYHtFXORHDFRQFHVVLRQiULDFRPSDUWLOKDRVGDGRVGHVVHWLWXODU
FRPDPRQWDGRUDHVVDDVVXPHRSDSHOGH2SHUDGRUVHRWUDWDPHQWRIRUIHLWR
HPQRPHGDFRQFHVVLRQiULD

48 49
 3DUDTXHDPRQWDGRUDSRVVDID]HURWUDWDPHQWRGRVGDGRVFROHWDGRVSHOD
FRQFHVVLRQiULDHVVDGHYHUiLQIRUPDUR&RPSDUWLOKDPHQWR dos dados ao
WLWXODUFRPGHWDOKHGDV¿QDOLGDGHVHFRQVHTXHQWHPHQWHVHUi
QHFHVViULDDDQiOLVHSDUDYHUL¿FDURVFDVRVHPTXHVHUiQHFHVViULRRSHGLGR
de &RQVHQWLPHQWR1HVWHFDVRGRGDGRFRPSDUWLOKDGRSHODFRQFHVVLRQiULD
FRPDPRQWDGRUDHVVD~OWLPDHVWDUiID]HQGRRWUDWDPHQWRGRUHIHULGRGDGR
SDUDGDUDQGDPHQWRDRFRQWUDWRFHOHEUDGRFRPDFRQFHVVLRQiULD
3DUDWDQWRVHUiSUHFLVRRDOLQKDPHQWRHVWUDWpJLFRHQWUH$VVRFLDomRGH
0DUFDH0RQWDGRUD
2SDVVRDSDVVRVXJHULGRDQWHULRUPHQWHGHYHUiDSRQWDUHVWH
&RPSDUWLOKDPHQWRVXD)LQDOLGDGH)RUPDGH&ROHWDHTXDOTXHU
RXWURWUDWDPHQWRQuando se tratar de execução de contrato, ou
VHMDHVVHQFLDOSDUDSUHVWDURVHUYLoRFRQWUDWDGRSUHYLVWRQRGRFXPHQWR
GHFRQWUDWDomREDVWDUiRHVFODUHFLPHQWRFRPSURYDGR, ou seja,
DLQIRUPDomRDRWLWXODUFDVRFRQWUiULRSDUDRXWUDV¿QDOLGDGHVVHP
HPEDVDPHQWROHJDOVHUiQHFHVViULRR&RQVHQWLPHQWR

6HJXUDQoDLQWHUQDHFkPHUDVGHYtGHRYLJLOkQFLDHR/HJtWLPR,QWHUHVVH
2XVRGHFkPHUDVGHYtGHRYLJLOkQFLDpPXLWRFRPXPFRQVLGHUDQGRDQHFHVVLGDGH
GHLGHQWL¿FDomRGHSHVVRDVSDUDDFHVVRDDPELHQWHVLQWHUQRVGHHPSUHVDVH
SUpGLRVHWDPEpPQRSUySULRFRQFHLWRHDSOLFDomRGHFLGDGHVLQWHOLJHQWHV
$LGHQWL¿FDomRGHTXDOTXHUSHVVRDDLQGDTXHIHLWDSRULPDJHQVSUHVVXS}H
DXWRUL]DomRSUpYLDQRHQWDQWRVHPDGHQWUDUQDTXHVWmRGH3ROtWLFDV3~EOLFDVH
GH6HJXUDQoD1DFLRQDOSDUDDUHDOLGDGHGDVFRQFHVVLRQiULDVHPRQWDGRUDVEHP
FRPRTXDOTXHUHPSUHVDQRkPELWRSULYDGRDYtGHRYLJLOkQFLDSRGH
ter um caráter de /HJtWLPR,QWHUHVVHWDQWRGR&RQWURODGRUFRPRGRSUySULR
WLWXODUGRGDGRSHVVRDO
$SUHPLVVDpSRGHUPRQLWRUDURDPELHQWHPDVFRPRMiRFRUULDDQWHULRUPHQWH
FRQVLGHUDQGRDSURWHomRFRQVWLWXFLRQDOVHID]QHFHVViULRRDYLVRSUpYLR
GHDPELHQWHPRQLWRUDGR GHTXHHVWiFDSWXUDQGRLPDJHPiXGLR PHVPR
TXHVHMDSRUSODFDVRXEDQQHUVFRPRRFRUUHFRPDIDPRVDIUDVH³VRUULD
YRFrHVWiVHQGR¿OPDGR´DFUHVFHQWDQGRDEDL[RDVXD¿QDOLGDGH³SDUD
TXHVW}HVGHVHJXUDQoD´
0DVDEDVHGD¿QDOLGDGHpDHVVrQFLDSDUDXVROtFLWRGHWDLVJUDYDo}HVSRLVHVWH
GDGRSRGHUiVHUXWLOL]DGRDSHQDVSDUDD¿QDOLGDGHLQIRUPDGDRXVHMDSDUD
VHJXUDQoD3DUDTXDOTXHURXWUD¿QDOLGDGHGHYHUmRVHUDYDOLDGDVDVKLSyWHVHV
OHJDLVRXVHUiQHFHVViULDDFROHWDGR&RQVHQWLPHQWRGRWLWXODUGRGDGRTXH
YDOHOHPEUDUSRGHUiVHUUHYRJDGRDTXDOTXHUPRPHQWR
$FROHWDGHELRPHWULDIDFLDOSRUVHWUDWDUGHGDGRSHVVRDOVHQVtYHOHQFRQWUD
DPSDURQR$UWJTXHSHUPLWHDFROHWDSDUDD¿QDOLGDGHGHSUHYHQomRjIUDXGH
HSDUDDVHJXUDQoDGRWLWXODUQRVSURFHVVRVGHLGHQWL¿FDomRHDXWHQWLFDomR
3RUWDQWRDELRPHWULDIDFLDOVHJXHDPHVPDSUHPLVVDDRXWLOL]DURVGDGRVSDUD
RXWUD¿QDOLGDGHTXHQmRVHMDVHJXUDQoDFRPRSRUH[HPSORSDUDDDQiOLVHGH
KXPRUVHUiQHFHVViULRRFRQVHQWLPHQWRGRWLWXODU
3RURXWURODGRSDUDRVGDGRV$QRQLPL]DGRVRXFROHWDGRVGHIRUPD
DQ{QLPDQmRKiLQFLGrQFLDGDPHVPDSURWHomRSRGHQGRVHUXWLOL]DGRV
OLYUHPHQWHFRPRQDDQiOLVHGHLQWHUHVVHHPSURGXWRVGHQWURGHXPDIHLUDRX
51
 VKRZURRPEDVHDGRHPDJUXSDPHQWRLQWHQVLGDGHGHFDORUQDVSUR[LPLGDGHVGH 1mRKiIRUPDWRSDGUmRSDUDHPEDVDPHQWRHDQiOLVHGR/HJtWLPR
GHWHUPLQDGRYHtFXOR ,QWHUHVVHPDVDH[HPSORGRTXHID]D8QLmR(XURSHLDrecomendamos o
Teste de FinalidadeHPWUrVHWDSDV
eLPSRUWDQWHTXHDVRSHUDo}HVGHWUDWDPHQWRGHGDGRVSHVVRDLVTXHVHXWLOL]DP
GR/HJtWLPR,QWHUHVVHHVWHMDPGHYLGDPHQWHUHJLVWUDGDVRXVHMDIRUPDOL]DGDV
EHPFRPRWHQKDPVLGRGHWHUPLQDGDVFRPEDVHHPDQiOLVHVyOLGDHIULDVREUH
ULVFRVLQHUHQWHVDHVWDSRVLomRWHQGRHPYLVWDTXHR/HJtWLPR,QWHUHVVHDSHVDUGH
SUHYLVWRQD/*3'GHL[DODFXQDVVREUHVXDDEUDQJrQFLD

ePXLWRSURYiYHOTXHDANPD - Autoridade Nacional de Proteção de

Dados PessoaisUHJXODPHQWHFRPPDLVGHWDOKHVQRIXWXURVREUHVXDDSOLFDomR
SRLVSRGHPRFRUUHUFRQWURYpUVLDVGHDFRUGRFRPLQWHUHVVHV

)DWRLPSRUWDQWHpTXHRWUDWDPHQWRFRPEDVHQR/HJtWLPR,QWHUHVVHpVXVFHWtYHO
GHTXHVWLRQDPHQWRSHOD$13'XPDYH]TXHHVWDSRGHVROLFLWDUXP5HODWyULRGH
,PSDFWRFRQIRUPHSUHYLVWRQR$UW†ž

O /HJtWLPR,QWHUHVVHGHYH¿FDUFRPR~OWLPDKLSyWHVHGH¿QDOLGDGH,
RXVHMDTXDQGRRWUDWDPHQWRGRVGDGRVQmRVHHQTXDGUDHPRXWUDKLSyWHVHGH
EDVHOHJDOGHH[FHomRGHFRQVHQWLPHQWRHQRUPDOPHQWHTXDQGRQmRKiFRPR
REWHUR&RQVHQWLPHQWRGRWLWXODUSUHYLDPHQWHDRWUDWDPHQWR

(QWHQGHPRVTXHXPH[HPSORSUiWLFRpRFRQWDWRFRPXPWLWXODUFXMRVGDGRV
SHVVRDLVHVWmRHPXPDEDVHOHJDGD DQWLJD HDLQVWLWXLomRTXHUUHDWLYDUD
&RPXQLFDomRFRPHQYLRGHXPDPDODGLUHWD$MXVWL¿FDWLYDDLQGDTXHQmRH[LVWD
PDLVFRQWUDWRREULJDomROHJDO WUDWDVHGHXPDEDVHOHJDGDDQWLJD H[LVWHXPD
UHODomRSUHWpULWDHQWUHDVSDUWHVTXHMXVWL¿FDXPQRYRFRQWDWRQRIXWXUR
5HODWyULRGH,PSDFWRGH3URWHomRGH'DGRV3HVVRDLV5,3'
4XDQGRXPWLSRGHWUDWDPHQWRGHGDGRVXWLOL]DUQRYDVWHFQRORJLDVOHYDQGR
HPFRQWDDVXDQDWXUH]DkPELWRFRQWH[WRH¿QDOLGDGHVFDVRSRVVDLPSOLFDU
QXPHOHYDGRULVFRSDUDRVGLUHLWRVHOLEHUGDGHVGDVSHVVRDVItVLFDVR
&RQWURODGRUDQWHVGHLQLFLDURWUDWDPHQWRGHYHUHDOL]DUXPD$YDOLDomRGH
,PSDFWRGDV2SHUDo}HVGH7UDWDPHQWRSDUDJDUDQWLUD3URWHomRGH'DGRV
3HVVRDLV3RUWDQWRVHXPDLRUREMHWLYRpLGHQWL¿FDUHPLWLJDURVULVFRV
LQHUHQWHVDRVHXWUDWDPHQWR

$OpPGLVVRFRPRPHQFLRQDGRDQWHULRUPHQWHVHPSUHTXHRWUDWDPHQWR
GHGDGRVSHVVRDLVIRUEDVHDGRQR/HJtWLPR,QWHUHVVH $UW,QFLVR
ž D$13'SRGHUiVROLFLWDUXP5HODWyULRGH,PSDFWR

 53
 O '3,$±'DWD3URWHFWLRQ,PSDFW$VVHVVPHQWDVVLPFKDPDGRSHOD
*'35 OHJLVODomRGD8QLmR(XURSHLD HQFRQWUDDPSDURQRRUGHQDPHQWR
MXUtGLFRQDFLRQDOQRV$UWVHžGD/*3'(QTXDQWRR$UWžPRVWUD
RFRQFHLWRGRWHUPRR$UWžDSUHVHQWDDKLSyWHVHGHVROLFLWDomRGR
'3,$QRVFDVRVGH/HJtWLPR,QWHUHVVHHR$UWžSUHFHLWXDTXHD$13'
SRGHUiGHWHUPLQDUDHODERUDomRGR'3,$LQFOXVLYHGHDados Sensíveis,
QRVWHUPRVGRUHJXODPHQWR3RUWDQWRDLQGDFDEHUij$13'PDQLIHVWDU
VHQHVWHVHQWLGR
2$UWžDSUHVHQWDWDPEpPDVLQIRUPDo}HVPtQLPDVTXHGHYHP
HVWDUSUHYLVWDVQRGRFXPHQWRVHQGRQRPtQLPRDGHVFULomRGRVWLSRVGH
GDGRVFROHWDGRVDPHWRGRORJLDXWLOL]DGDSDUDDFROHWDHSDUDDJDUDQWLD
GDVHJXUDQoDGDVLQIRUPDo}HVHDDQiOLVHGR&RQWURODGRUFRPUHODomRjV
PHGLGDVVDOYDJXDUGDVHPHFDQLVPRVGHPLWLJDomRGHULVFRDGRWDGRV
$UHVSRQVDELOLGDGHGHDSUHVHQWDUR'3,$pGR&RQWURODGRUSRUWDQWRHVWH
GHYHDQWHYHUVLWXDo}HVTXHSRVVDPJHUDUDVROLFLWDomRSRUSDUWHGD$13'
$OpPGLVVRLQGHSHQGHQWHGDUHTXLVLomRGD$13'R$VVHVVPHQWQHFHVViULR
SDUDDHODERUDomRGR5HODWyULRpGHH[WUHPDLPSRUWkQFLDSDUDTXDOTXHU
RUJDQL]DomRXPDYH]TXHSHUPLWHDDQiOLVHHIHWLYDSDUDJHVWmRGHULVFRH
FRQVROLGDRHPEDVDPHQWRSDUDGHFLV}HVHVWUDWpJLFDVVHQGRIDWRULPSRUWDQWH
QDFRPSURYDomRGDERDIpHFXOWXUDGHSUHYHQomRFRPRHVVrQFLDGDHPSUHVD
$SUHVHQWDPRVQRDQH[R,,,XPDVXJHVWmRSDUDR5HODWyULRGH,PSDFWR
4XDLVDVSHFXOLDULGDGHVQRWUDWDPHQWRGHGDGRV
SHVVRDLVQR%%H%&"
$VUHODo}HVBusiness to Business (empresa para empresa) e Business to
Costumer (empresa para consumidor)VHGLIHUHPSHOD¿QDOLGDGHGHFROHWD
PDVQmRSHODFRPSOH[LELOLGDGHWHQGRHPYLVWDTXHDPERVGHYHPDWHQGHUjV
QHFHVVLGDGHVGD/*3'ePXLWRFRPXPTXHDVSUHRFXSDo}HVUHFDLDPVREUH
DUHODomR%&PDVPXLWRHPERUDD/HLQmRVHDSOLTXHDRVGDGRVGHSHVVRD
MXUtGLFDQRUPDOPHQWHDUHODomRHQWUHHPSUHVDV %% HQYROYHGDGRVSHVVRDLV
GRVIXQFLRQiULRVDORFDGRVRXUHVSRQViYHLVSHODSUHVWDomRHQWUHJDGRVHUYLoR
VHMDP'DGRV&DGDVWUDLVFRPR&3)H5*RX'DGRV6HQVtYHLVFRPRELRPHWULD
54
HQWUHRXWURVH[HPSORV1HVWHFDVRpSUHFLVRTXHRVFRQWUDWRVWHQKDPSUHYLVmR
GHFOiXVXODHVSHFt¿FDSDUDJDUDQWLUTXHFDGDSDUWHDVVXPDDUHVSRQVDELOLGDGH
TXHOKHFDEHQRGHYHUGH7UDQVSDUrQFLD3URWHomRH&ROHWDGR&RQVHQWLPHQWR
TXDQGRQHFHVViULR
1DVUHODo}HV%&FXMRIRFRUHFDLQDSUHRFXSDomRGDPDLRULDDFRQWHFHR
PHVPRVHQGRQHFHVViULRSDUDDPERVRVFDVRVDLGHQWL¿FDomRTXHGHYH
RFRUUHUORJRQRLQtFLRSRUPHLRGR0DSDGH'DGRVHSRVWHULRU$QiOLVHGH
)LQDOLGDGHHHQTXDGUDPHQWRQDVKLSyWHVHVGRDUWR
Para os dois casos citados, UHFRPHQGDPRVDFULDomRGHXPD3ROtWLFD
de Gestão de Proteção de Dados Pessoais e $GHTXDomR&ULDomRGD
Política de PrivacidadeTXHSDVVDDVHUWDPEpPGHProteção de Dados
Pessoais1D3ROtWLFDGH*HVWmRVHUmRFULDGDVDVUHJUDVSDUDWUDWDPHQWRGH
GDGRVSHVVRDLVHQD3ROtWLFDGH3ULYDFLGDGHVmRGH¿QLGDV
DVUHJUDVHLQIRUPDo}HVDVHUHPGLVSRQLELOL]DGDVDRVWLWXODUHV
&RPRDGHTXDUD3ROtWLFDGH3ULYDFLGDGH5RWHLUR
$GHTXDUD3ROtWLFDGH3ULYDFLGDGHDSULQFtSLRSRGHSDUHFHUIiFLOPDVQD
SUiWLFDpEHPFRPSOH[RSRLVSDUDH¿FLrQFLDGHTXDOTXHUGRFXPHQWRp
QHFHVViULRSDVVDUSHODSULPHLUDIDVHTXHpRGLDJQyVWLFRTXHWHPFRPR
premissa,GHQWL¿FDURV'DGRVTXHVmR&ROHWDGRVD)LQDOLGDGHGD
&ROHWDD3URWHomR$SOLFDGDHQWUHRXWUDVTXHVW}HVdemonstradas no
GLDJUDPDDSUHVHQWDGRQRLQtFLRGHVWH*XLD
eSRVVtYHOID]HUXPchecklistFRPDVSULQFLSDLVLQIRUPDo}HVTXHGHYHPFRQVWDU
na Política de PrivacidadeFRPRSRUH[HPSOR PDVQmRVHOLPLWDQGRDHODV 
,QGLFDomRGR'32±'DWD3URWHFWLRQ2ɤFHU
3RVVLELOLGDGHGHFRQ¿UPDomRHOLPLWDomRRSRVLomRDRWUDWDPHQWRDFHVVR
DOWHUDomRRXH[FOXVmRGR'DGR3HVVRDO
/LPLWDomRGRXVRGR'DGR3HVVRDOFRQIRUPH¿QDOLGDGH
55
 3RVVLELOLGDGHGHUHWLUDGDGR&RQVHQWLPHQWRSHOR7LWXODUGR'DGR3HVVRDO I - advertência, com indicação de prazo, para a adoção de medidas
HPTXDOTXHUPRPHQWRVHPFRPSURPHWHUDOLFLWXGHGRWUDWDPHQWRHIHWXDGR FRUUHWLYDV
SUHYLDPHQWHFRPEDVHQR&RQVHQWLPHQWRDQWHULRUPHQWHGDGR
II - multa simples, de até 2% (dois por cento) do faturamento da pessoa
3VHXGRQLPL]DomRDQRQLPL]DomR jurídica, de direito privado, grupo ou conglomerado no Brasil, no seu
último exercício, excluídos os tributos, limitada, no total, a
,QIRUPDomRGHTXDLV'DGRV3HVVRDLVVmRFROHWDGRV 5 FLQTXHQWDPLOK}HVGHUHDLV SRULQIUDomR

,QIRUPDomRVREUHSDUDTXHPRV'DGRV3HVVRDLVVHUmRGLYXOJDGRVUHYHODGRV ,,,PXOWDGLiULDREVHUYDGRROLPLWHWRWDODTXHVHUHIHUHRLQFLVR,,

)LQDOLGDGHHVSHFt¿FDHH[SOtFLWDGH7UDWDPHQWRGR'DGR3HVVRDOHR ,9SXEOLFL]DomRGDLQIUDomRDSyVGHYLGDPHQWHDSXUDGDHFRQ¿UPDGD
IXQGDPHQWRMXUtGLFR DVXDRFRUUrQFLD
V - bloqueio dos dados pessoais, a que se refere a infração, até a sua
([LVWrQFLDGH&ROHWDGH'DGRV3HVVRDLV6HQVtYHLV (PGHVWDTXH  UHJXODUL]DomR
9,HOLPLQDomRGRVGDGRVSHVVRDLVDTXHVHUHIHUHDLQIUDomR
,QIRUPDo}HVGHLGHQWLGDGHHFRQWDWRGR&RQWURODGRUGLVSRQtYHLVHVH 9,, 9(7$'2 
DSOLFiYHOGRVHXUHSUHVHQWDQWH 9,,, 9(7$'2 
,; 9(7$'2 
3RVVLELOLGDGHGHRWLWXODUGRVGDGRVQmRIRUQHFHU&RQVHQWLPHQWRHDV X - suspensão parcial do funcionamento do banco de dados a que se
FRQVHTXrQFLDVGHVVDQHJDWLYD refere a infração, pelo período máximo de 6 (seis) meses, prorrogável
por igual período, até a regularização da atividade de tratamento pelo
5HVSRQVDELOLGDGHVGR&RQWURODGRU FRQWURODGRU ,QFOXtGRSHOD/HLQžGH 
XI - suspensão do exercício da atividade de tratamento dos dados
,QIRUPDo}HVVREUHR8VR&RPSDUWLOKDGRGH'DGRVSHOR&RQWURODGRU pessoais a que se refere a infração, pelo período máximo de 6 (seis)
HVXD)LQDOLGDGH PHVHVSURUURJiYHOSRULJXDOSHUtRGR ,QFOXtGRSHOD/HLQžGH

6HQmRDWHQGHUj&RQIRUPLGDGHGD/HLTXDLV XII - proibição parcial ou total do exercício de atividades relacionadas a
DVFRQVHTXrQFLDV" WUDWDPHQWRGHGDGRV ,QFOXtGRSHOD/HLQžGH

2$UWGD/*3'SUHFHLWXDDVFRQVHTXrQFLDVGD1mR&RQIRUPLGDGH, ou eLPSRUWDQWHHVFODUHFHUTXHDDWXDomRGD$13'VHWUDWDGHSURFHVVR
VHMDDVSHQDOLGDGHVTXHSRGHUmRVHUDSOLFDGDVDSULQFtSLRSRULQIUDomR DGPLQLVWUDWLYRTXHLQGHSHQGHGHHYHQWXDOSURFHVVRFLYLOFULPLQDOH
GHQ~QFLDVHPyUJmRVFRPRR3URFRQ
Art. 52. Os agentes de tratamento de dados, em razão das infrações
FRPHWLGDVjVQRUPDVSUHYLVWDVQHVWD/HL¿FDPVXMHLWRVjVVHJXLQWHV $OpPGLVVRWDQWRR&RQWURODGRUFRPRR2SHUDGRUSRGHPUHVSRQGHU
sanções administrativas, aplicáveis pela Autoridade Nacional: SRULQFLGHQWHVTXDQGR

56 57
 Art. 42. O controlador ou o operador que, em razão do exercício de
atividade de tratamento de dados pessoais, causar a outrem dano
patrimonial, moral, individual ou coletivo, em violação à legislação de
proteção de dados pessoais, é obrigado a repará-lo.
†ž$¿PGHDVVHJXUDUDHIHWLYDLQGHQL]DomRDRWLWXODUGRVGDGRV
I - o operador responde, solidariamente, pelos danos causados pelo
tratamento, quando descumprir as obrigações da legislação de
proteção de dados ou quando não tiver seguido as instruções lícitas do
controlador, hipótese em que o operador equipara-se ao controlador,
VDOYRQRVFDVRVGHH[FOXVmRSUHYLVWRVQR$UWGHVWD/HL VHUGLVSRQLELOL]DGDVGHIRUPDFODUDDGHTXDGDHRVWHQVLYD
II - os controladores que estiverem, diretamente, envolvidos no
tratamento, do qual decorreram danos ao titular dos dados, respondem,
VROLGDULDPHQWHVDOYRQRVFDVRVGHH[FOXVmRSUHYLVWRVQR$UWGHVWD/HL
4XDLVVmRRVGLUHLWRVGRVWLWXODUHVGHGDGRVHSRUTXHFRQKHFrORV"
2$UWHOHQFDRVGLUHLWRVGRVWLWXODUHVVHQGRGHH[WUHPDLPSRUWkQFLD
TXHDVHPSUHVDVVHSUHSDUHPHGLVSRQLELOL]HPRVPHLRVTXHSHUPLWDPDR
WLWXODUH[HUFHUVHXVGLUHLWRV
,FRQ¿UPDomRGDH[LVWrQFLDGHWUDWDPHQWR
,,DFHVVRDRVGDGRV 9,UHVSRQVDELOLGDGHVGRVDJHQWHVTXHUHDOL]DUmRRWUDWDPHQWRH
,,,FRUUHomRGHGDGRVLQFRPSOHWRVLQH[DWRVRXGHVDWXDOL]DGRV VII - direitos do titular, com menção explícita aos direitos contidos no Art. 18.
IV - anonimização, bloqueio ou eliminação de dados desnecessários,
H[FHVVLYRVRXWUDWDGRVHPGHVFRQIRUPLGDGHFRPRGLVSRVWRQHVWD/HL
V - portabilidade dos dados
VI - eliminação dos dados pessoais tratados com o consentimento do
WLWXODUH[FHWRQDVKLSyWHVHVSUHYLVWDVQR$UWGHVWD/HL
58
VII - informação das entidades públicas e privadas com as quais o
&RQWURODGRUUHDOL]RXXVRFRPSDUWLOKDGRGHGDGRV
VIII - informação sobre a possibilidade de não fornecer Consentimento e
VREUHDVFRQVHTXrQFLDVGDQHJDWLYD
IX - revogação do Consentimento, nos termos do § 5º do Art. 8º desta Lei.
$OpPGLVVRR&RQWURODGRUGHYHFRQVLGHUDUR Art. 9º, em atendimento
ao princípio do Livre Acesso, RTXHYHUVDVREUHRGLUHLWRGH acesso
IDFLOLWDGRjVLQIRUPDo}HVVREUHRWUDWDPHQWRGHVHXVGDGRV(VWHVGHYHUmR

,¿QDOLGDGHHVSHFt¿FDGRWUDWDPHQWR
II - forma e duração do tratamento, observados os segredos comercial e
LQGXVWULDO
,,,LGHQWL¿FDomRGRFRQWURODGRU
,9LQIRUPDo}HVGHFRQWDWRGRFRQWURODGRU
V - informações acerca do uso compartilhado de dados pelo controlador e
D¿QDOLGDGH
4XHPpR(QFDUUHJDGRSHOD3URWHomRGH'DGRV3HVVRDLV'32"
O EncarregadoSHOD3URWHomRGH'DGRV3HVVRDLVpDIXQomRLQVWLWXtGDSHOD
SUySULD/HLTXHDSULQFtSLRGHYHULDVHUH[HUFLGDDSHQDVSRUXPDSHVVRD
QDWXUDOItVLFDPDVTXHPXGRXGHYLGRj0HGLGD3URYLVyULDHDWXDO/HL
SRVVLELOLWDQGRTXHVHMDXPVHUYLoRWHUFHLUL]DGR
59
 8PDGDVIXQo}HVSULQFLSDLVGRHQFDUUHJDGRpVHURFDQDOGHFRPXQLFDomR
HQWUHR&RQWURODGRURV7LWXODUHVGH'DGRVHD$XWRULGDGH1DFLRQDO
DUWž9,,, 
$VDWLYLGDGHVGR(QFDUUHJDGRHQYROYHP
,DFHLWDUUHFODPDo}HVHFRPXQLFDo}HVGRVWLWXODUHVSUHVWDUHVFODUHFLPHQWRV
HDGRWDUSURYLGrQFLDV
,,UHFHEHUFRPXQLFDo}HVGDDXWRULGDGHQDFLRQDOHDGRWDUSURYLGrQFLDV
,,,RULHQWDURVIXQFLRQiULRVHRVFRQWUDWDGRVGDHQWLGDGHDUHVSHLWRGDV
SUiWLFDVDVHUHPWRPDGDVHPUHODomRjProteção de Dados Pessoais
,9±H[HFXWDUDVGHPDLVDWULEXLo}HVGHWHUPLQDGDVSHOR&RQWURODGRURX
HVWDEHOHFLGDVHPQRUPDVFRPSOHPHQWDUHV $UW†ž 
,PSRUWDQWHUHVVDOWDUTXHDLGHQWLGDGHHDVLQIRUPDo}HVGHFRQWDWRGR
(QFDUUHJDGRGHYHUmRVHUGLYXOJDGDVSXEOLFDPHQWHGHIRUPDFODUDH
REMHWLYDSUHIHUHQFLDOPHQWHQRVLWHGR&RQWURODGRU $UW†ž 
2TXHpRGHYHUGH5HSRUW"
2GHYHUGHReportpDREULJDomRWUD]LGDSHOR$UWGD/*3'TXHSUHFHLWXD
TXHWRGRLQFLGHQWHTXHSRVVDDFDUUHWDUULVFRRXGDQRUHOHYDQWHDRWLWXODU
GHYHUiVHULQIRUPDGRj$13'HDRVWLWXODUHVGRVGDGRV
8PDREVHUYDomRLPSRUWDQWHpTXHR2SHUDGRUVHPSUHGHYHUiQRWL¿FDU
R&RQWURODGRUVHPGHPRUDDSyVWRPDUFRQKHFLPHQWRGHXPD
violação de dados pessoais.
$/*3'IDODHPSUD]RUD]RiYHOHQmRGHWHUPLQDHPGLDVDWpTXDQGR
GHYHUiVHUIHLWDD&RPXQLFDomRDR&RQWURODGRUH7LWXODU1RHQWDQWRpEHP
SURYiYHOTXHDSUySULD$13'HVWLSXOHRSUD]RDVHUDWHQGLGR(QTXDQWRLVVR
QmRDFRQWHFHVXJHULPRVTXHDFRPXQLFDomRVHMDIHLWDLPHGLDWDPHQWHDSyV
WRPDUFLrQFLDHDSXUDomRUHDOGRVIDWRV
2VWLSRVGHYLRODo}HVGHGDGRVSHVVRDLVTXHJHUDPHOHYDGRULVFRSDUDRV
WLWXODUHVVHULDP
D H[SRVLomR TXHpSUDWLFDPHQWHRYD]DPHQWR 

E SHUGD TXHpTXDQGRRVGDGRVSHVVRDLVVmRHOLPLQDGRVVHMDSRU
DSDJDPHQWRLQGLVSRQLELOLGDGH FRPRpRFDVRGH¿FDUFULSWRJUDIDGR RX
SHUGDGRGLVSRVLWLYRHPTXHHVWDYDPDUPD]HQDGRVHQmRVHWHPREDFNXS 
F XVRLQGHYLGRHRXLOtFLWR TXHSRGHRFRUUHUSRUTXHIRLXVDGRSDUDXPD
¿QDOLGDGHQmRLQIRUPDGDVHPWUDQVSDUrQFLDRXHQWmRIRLXVDGRSRUXP
WHUFHLURQmRDXWRUL]DGR¿FRXGDSRVVHGHXPKDFNHUHRXIRUDPURXEDGRV 
3RUWDQWRXPH[HPSORGHIiFLOHQWHQGLPHQWRVHULDRVHTXHVWURGHGDGRV
DVVLPFRPRRFRUUHXFRPDOJXPDVHPSUHVDVFRPRRansomware WannaCry
TXHDSyVFULSWRJUDIDUREDQFRGHGDGRVGHGLYHUVDVHPSUHVDVRVFULPLQRVRV
pediam por resgate em bitcoins
1RUHSRUWDLQIRUPDomRHQFDPLQKDGDGHYHUiRFRUUHUSRUXP5HODWyULRGH
,PSDFWRRQGHGHYHUiFRQVWDU
,DGHVFULomRGDQDWXUH]DGRVGDGRVSHVVRDLVDIHWDGRV
,,DVLQIRUPDo}HVVREUHRVWLWXODUHVHQYROYLGRV
,,,DLQGLFDomRGDVPHGLGDVWpFQLFDVHGHVHJXUDQoDXWLOL]DGDVSDUDD
SURWHomRGRVGDGRVREVHUYDGRVRVVHJUHGRVFRPHUFLDOHLQGXVWULDO
,9RVULVFRVUHODFLRQDGRVDRLQFLGHQWH
9RVPRWLYRVGDGHPRUDQRFDVRGHDFRPXQLFDomRQmRWHUVLGRLPHGLDWD
9,DVPHGLGDVTXHIRUDPRXTXHVHUmRDGRWDGDVSDUDUHYHUWHURXPLWLJDURV
HIHLWRVGRSUHMXt]R
†ž$$XWRULGDGH1DFLRQDOYHUL¿FDUiDJUDYLGDGHGRLQFLGHQWHHSRGHUi
FDVRQHFHVViULRSDUDDVDOYDJXDUGDGRVGLUHLWRVGRVWLWXODUHVGHWHUPLQHUDR
&RQWURODGRUDDGRomRGHSURYLGrQFLDVWDLVFRPR
,DPSODGLYXOJDomRGRIDWRHPPHLRVGHFRPXQLFDomR
,,PHGLGDVSDUDUHYHUWHURXPLWLJDURVHIHLWRVGRLQFLGHQWH
61
 &RPRPDQWHUD6HJXUDQoDGD,QIRUPDomRQD3URWHomR
de Dados Pessoais
$VVLPFRPRPHQFLRQDGRQRVSULQFtSLRVWUD]LGRVSHOD/*3'D6HJXUDQoDGRV
GDGRVSHVVRDLVTXHVLJQL¿FD6HJXUDQoDGD,QIRUPDomR 6, pXPUHTXLVLWR
TXHQmRSRGHVHUQHJOLJHQFLDGR7HPFRPREDVHWUrVSLODUHVIntegridade,
&RQ¿GHQFLDOLGDGH e 'LVSRQLELOLGDGH
&RPRGHFRUUHUGRWHPSRHVSHUDVHTXHD$13'GHOLEHUHVREUHRVUHTXLVLWRV
GH6,PDVHQTXDQWRLVVRQmRDFRQWHFHWRPDPVHSRUEDVHDVERDVSUiWLFDV
PXQGLDLVVRERDOLFHUFHGD1RUPD$%17,62HHDQRYD1RUPD
,62,(&DWXDOL]DGDSDUD3URWHomRGH'DGRV3HVVRDLV
3DUDFRQWULEXLUFRPDEOLQGDJHPGD6HJXUDQoDGD,QIRUPDomRQRTXHVLWR
3ULYDFLGDGHH'DGRV3HVVRDLVDSUHVHQWDPRVXPDVXJHVWmRGHFKHFNOLVW IRUPDOL]DGRHGLYXOJDGRDRVFRODERUDGRUHV"
ŀ$(PSUHVDFRQVLGHUDWRGDVDVTXHVW}HVGDOHJLVODomR &RQVHQWLPHQWR
7UDQVIHUrQFLD7UDWDPHQWRV5HWHQomRHWF HPVXDVWULOKDVGHDXGLWRULD"
ŀ$(PSUHVDPDQWpPUHJLVWURGHWRGDVDVDWLYLGDGHVGH7UDWDPHQWR
GH'DGRV3HVVRDLV"
ŀ$(PSUHVDPRQLWRUDRVDPELHQWHVItVLFRVOyJLFRVHYLUWXDLVRQGHRV'DGRV
3HVVRDLVHVWmRGLVSRQtYHLV"
ŀ$(PSUHVDFRQ¿UPDHPGXSODYHUL¿FDomRVHRV'DGRV3HVVRDLV
DUPD]HQDGRVHPXPUHFXUVRWHFQROyJLFRIRUDPHOLPLQDGRVGHIRUPD
GH¿QLWLYHDQWHVGRGHVFDUWHRXUHXWLOL]DomRGRUHFXUVR"
ŀ$(PSUHVDUHDOL]DDJHVWmRGRFLFORGHYLGDGRV'DGRV3HVVRDLVLQFOXLQGR
DFULDomRGXSOLFDomRWUDQVPLVVmRHGHVFDUWHDRWpUPLQRGD¿QDOLGDGH"
ŀ7RGRVRVVLVWHPDVGD(PSUHVDUHÀHWHPDVSROtWLFDVHSURFHGLPHQWRVGH
OHJLWLPDomRGHSURFHVVDPHQWRGRV'DGRV3HVVRDLV"
ŀ$(PSUHVDXWLOL]DWpFQLFDVGH3VHXGRQLPL]DomRRX$QRQLPL]DomRGH
'DGRV3HVVRDLVVHPSUHTXHQHFHVViULR"

ŀ2V'DGRV3HVVRDLVH[LVWHQWHVGHIRUPDUHSHWLWLYHHPGLYHUVRV
VLVWHPDVSRVVXHPDOJXPSURFHVVRGHFRQVROLGDomRHOHWU{QLFDHFRP
TXDOLGDGHDVVHJXUDGD"
ŀ$(PSUHVDUHDOL]DD$YDOLDomRRX5HODWyULRGH,PSDFWRVREUHD3URWHomR
GH'DGRVQRVFDVRVSUHYLVWRVQDOHJLVODomRRXGH¿QLGRVSHOD$XWRULGDGH
1DFLRQDODQWHVGHLQLFLDURWUDWDPHQWR"
ŀ$(PSUHVDUHSRUWDRUHVXOWDGRGDV$YDOLDo}HVGH,PSDFWRVREUHD3URWHomR
GH'DGRVDR(QFDUUHJDGR"
ŀ$(PSUHVDPDQWpPR3ODQRGH5HVSRVWDDYLRODo}HVGH'DGRV3HVVRDLV
ŀ$(PSUHVDJDUDQWHTXHR3ODQRGH5HVSRVWDDYLRODo}HVGH'DGRV
3HVVRDLVFRQWpPDIRUPDGHQRWL¿FDomRjVDXWRULGDGHVFRPSHWHQWHVHDRV
7LWXODUHVGH'DGRV"
ŀ$(PSUHVDPDQWpPXPDHTXLSHWUHLQDGDSDUDUHVSRQGHURVLQFLGHQWHV
UHODFLRQDGRVDYLRODo}HVGH'DGRV3HVVRDLV"
ŀ$(PSUHVDPDQWpPRFRQWUROHGDUDVWUHDELOLGDGHGRVLQFLGHQWHV
UHODFLRQDGRVDRV'DGRV3HVVRDLV"
$/*3'DSOLFDVHDSHQDVj&ROHWDH$UPD]HQDPHQWRHP
DPELHQWHHOHWU{QLFR"
A LGPD se aplica a todos os Dados Pessoais e Sensíveis,
LQGHSHQGHQWHGRPHLRGH&ROHWDRX$UPD]HQDPHQWR e, tampouco,
GDVIHUUDPHQWDVXWLOL]DGDVSDUDTXDOTXHURXWURWLSRGH7UDWDPHQWR$OpP
GLVVRDSOLFDVHWDPEpPDROHJDGRTXHSRUVXDYH]WHUiTXHVHUOHJLWLPDGR
,VVRTXHUGL]HUTXHGDGRVFROHWDGRVDQWHULRUPHQWHjYLJrQFLDGD/HL
WDPEpPSUHFLVDUmRVHUDQDOLVDGRVHOHJLWLPDGRVQRVHQWLGRGHLGHQWL¿FDUDV
KLSyWHVHVOHJDLVRXQHFHVVLGDGHGHREWHQomRGR&RQVHQWLPHQWRGRWLWXODU
63
 ANEXO II
FICHAS E CADASTROS

$SUHVHQWDPRVDVHJXLUDOJXQVH[HPSORVQD,GHQWL¿FDomRGH
&DWHJRULDGH'DGRV

)LFKD&DGDVWUDO

$WHQomRSRLVDLQGDTXHVHMDXPD¿FKDGHSHVVRDMXUtGLFDSRGHFRQWHUGDGRV
SHVVRDLVGHVyFLRVGLUHWRUHVRXTXDOTXHURXWURUHSUHVHQWDQWH

64 65
 3URSRVWDGH&RPSUDGH9HtFXORV

ANEXO III – O QUE NÃO PODE

FALTAR NO RELATÓRIO DE
IMPACTO
3RUFHUWRTXHQDSUiWLFDR5HODWyULRGH,PSDFWRSRGHVHUEHPPDLV
FRPSOH[RGRTXHRVGDGRVDVHJXLUDSUHVHQWDGRVSRLVWUDWDVHGHXPD
VXJHVWmRLQLFLDOGHIRUPDTXHFDGDHPSUHVDGHYHUiFULDURVHXSUySULR
DPIAVHPHVTXHFHUGRVSRQWRVEiVLFRV

66 67
68 69
 ANOTAÇÕES


Este Guia de melhores práticas para aplicação da Lei Geral de
Proteção de Dados – LGPD é uma publicação da FENABRAVE –
Federação Nacional da Distribuição de Veículos Automotores
elaborada em março de 2020.