Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, published its initial guidelines for reporting a security incident. The document includes the tasks an organization should perform when faced with a security incident, who should report the case to the ANPD and the specific details to report to the agency. The ANPD is accepting feedback on the guidelines until March 24. Editor's note: The IAPP's Joe Duball recently caught up with ANPD board official Miriam Wimmer, CIPP/E, to discuss the DPA's plans.
Full Story