Provisional Measure That Amends The General Data Protection Law Is Approved In Both Houses Of The National Congress

The Senate approved on Wednesday (May 29) the Provisional Measure No. 869/2018 (MP 869), with modifications, as a Bill Of Conversion (PLV) No. 7/2019, which amends some aspects of the Brazilian General Data Protection Law (Law No. 13,709/2018 or LGPD) and has as main characteristic the creation of the Data Protection National Authority (ANPD), vetoed by President Michel Temer at the time of the sanction of the LGPD.

Among the changes, the transitional legal nature of the ANPD is highlighted. The ANPD is created as an organ of the Federal Government member of the Presidency of the Republic, but it can be transformed into an indirect federal public administration entity and submitted to a special autocratic regime by the Executive Branch within 2 years from the date of entry into force of the ANPD's regimental structure.

In addition to the changes in the structure and attributions of the ANPD, MP 869 brings other important changes, among them: (i) the possibility of sharing sensitive personal data between data controllers with an economic objective, provided that the exchange of such data is necessary for the provision of health services and pharmaceutical assistance to the interests of data subjects; (ii) the exemption of the public authority from informing the data subject about situations in which their data may be processed for compliance with a legal or regulatory obligation, as well as for the execution of public policies provided for in laws or agreements; (iii) the possibility of legal entities governed by private law, which are fully controlled by the public authorities, to handle all the data contained in databases created for the purposes of public security, national defense or state security, investigation and prosecution of...