Advertisements
The 1st Federal Civil Court of São Paulo issued a ruling, providing benefits to millions of Brazilians, with 281,492 individuals in Alagoas specifically set to receive compensation of R$15,000 each. For what reason? An information leak in the second half of 2022 harmed these individuals, most of whom were Auxílio Brasil beneficiaries. Nationwide, approximately 4 million citizens had their data exposed, resulting in a total of approximately R$56 BILLION in compensation.
Auxílio Brasil Context
Auxílio Brasil emerged as a Brazilian government social support program, designed to provide financial assistance to the most disadvantaged segments of the population. Its importance was crucial during the COVID-19 pandemic, when many Brazilian citizens faced the loss of jobs and other sources of income. Under Lula's administration, the program resumed the name Bolsa Família.
Read also:Bolsa Família: Digitizing Documents Is Essential for Single-Person Households!
Judicial Verdict
The legal verdict established that Caixa Econômica Federal, Dataprev, the ANPD (National Data Protection Authority), and the Federal Government are responsible for paying the compensations. The list of affected individuals was not made public.
Judge Marco Aurelio de Mello Castrianni instructed all institutions involved to inform the beneficiaries by mail. The ruling may be appealed, and Caixa announced that it has already filed an appeal.
Subsequent Measures
In addition to the individual compensations, the judge ordered a payment of R$ 40 million for collective moral damages, an amount allocated to the Fund for the Defense of Diffuse Rights. It was also required that those affected be notified about the security incident that caused the data leak and that a thorough review of the data storage systems be implemented, as well as the development of new security strategies and proactive controls.
The ruling issued by the 1st Federal Civil Court of São Paulo represents a significant victory for the victims of the data exposure, offering substantial financial relief. However, it is a stark warning about the need for data security and the repercussions of its violation. The affected entities will have to implement considerable measures to prevent future incidents, and the court's ruling serves as a warning to other institutions about the consequences of negligence in data protection.
Furthermore, the verdict emphasizes the importance of transparency and proper communication in these circumstances. Victims deserve clear information about the incidents and the solutions adopted. Notifying victims by correspondence is progress, but additional measures are imperative to ensure that such events receive the seriousness they deserve.
Beginning of the Dilemma
In 2022, under Jair Bolsonaro’s government, a substantial data leak of Auxílio Brasil beneficiaries was reported. The courts ordered Caixa Econômica Federal and the Federal Government to compensate each of the 3.7 million affected beneficiaries with R$ 15,000, potentially exceeding R$ 56 billion if the decision stands.
Case Participants
The Institute for the Defense of Personal Data Protection, Compliance and Information Security, known as Sigilo, drove the legal proceedings. Caixa, the Federal Government, ANPD, and Dataprev are the entities involved in the case.
Nature of the Exposed Data
According to Victor Hugo Pereira Gonçalves, head of the Sigilo Institute, the leaked information included personal data, telephone numbers, dates of birth, amounts of benefits received, NIS, and details of SUS records.
How to Check Whether Your Data Was Exposed
Read also:Registration for Bolsa Família: Find out which documents are required at CRAS.
Evidence of the leak, attached to the case by the Sigilo Institute, is not publicly available due to the LGPD. However, a preliminary order requires Caixa and the Federal Government to notify those affected about the incident.
However, Caixa, stating that it will appeal, has not yet issued the notifications. If the order is upheld, those affected will be informed at the end of the proceedings, which may take time depending on the progress of the case.
Caixa Econômica Federal's Position
Caixa emphasized its intention to appeal the decision and claims, following a preliminary assessment, that it did not identify any data leak involving data under its custody. It asserts that it has solid infrastructure for data protection and ensures compliance with the LGPD.
Recommended Actions
If you receive a data exposure notification, it is crucial to act immediately. Contact Caixa or the Federal Government for additional details and consider seeking legal advice to understand your rights and available options.
