In this edition of the Cybernews, we highlight the main news on data protection in April 2025. You may also find an analysis on the sustainable future of Artificial Intelligence (AI) related to ChatGPT and Studio Ghibli.
Firstly, Procon-SP imposed a fine of BRL 13.522 million on Banco Pan for making telemarketing calls to consumers that registered in the “Do Not Call” list. This measure highlights the importance of data protection and privacy, ensuring that consumers have the right to opt out of unwanted offers. The penalty reinforces the need for financial institutions to comply with regulations aimed at protecting citizens’ privacy.
Additionally, on April 24, 2025, brokerage firm XP notified its clients about unauthorized access to data from an external vendor on March 22, which resulted in the leakage of personal and financial information. While XP assures the security of clients’ funds, lawsuits for damages may still be filed against it, with debate over the necessity of proving actual losses. Communication to clients was delayed compared to the notification given to the National Data Protection Authority (ANPD in Portuguese), raising questions about the company’s civil liability and potential sanctions under the General Data Protection Law (LGPD in Portuguese).
Moreover, on April 25, the Federal Supreme Court (SFT in Portuguese) discussed the Limits to the Police Chief’s Power of Request. Although the Reporting Justice voted to limit access to data and highlight the importance of respect for privacy and data protection, especially in light of the most recent legislation, such as the Civil Rights Framework for the Internet and LGPD, Justice Cristiano Zanin requested to see the record and the judgment was suspended.
