So, in Brazilian politics and data rights news, the Federal Data Processing Service (Serpro), Brazil's biggest government-owned corporation of IT services, is now officially allowed to sell citizens' private data to third parties.
The decision is in Ordinance 167 of the Federal Revenue (roughly our IRS), published this Tuesday, April 19th 2022, in the Federal Official Gazette (the official journal of the federal government). It would be a way for the agency to be remunerated for the service and for the costs in machine use.
Among the data that can be sold are many that are considered 'sensitive' and that have to be notified in case of leaks by hacker attacks, such as e-mail, telephone, CPF (Registry of Physical Person, individual taxpayer registry), physical person's address, company regime, and qualification of person in charge of company.
Deputy André Figueiredo (Democratic Labour Party - PDT) has submitted a draft legislative decree to the Chamber of Deputies aiming to stop the effects of the Ministry of Economy Ordinances, especially those of the Federal Revenue Service of Brazil, which grant Serpro authorization to share data with third parties under allegation of execution of public policies.
(x)