Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, published guidelines on the definitions for controller, processor and data protection officer under the General Data Protection Law. The non-binding guidelines outline the roles and potential liability associated with each. ANPD President Waldemar Gonçalves Ortunho Junior said the guidance "brings legal certainty and solves some of the main doubts that arose during the first months of the Authority's existence." The ANPD also opened an unspecified public consultation period for the guidance.
Full Story