Just before leaving office, former Brazil President Michel Temer enacted a provisional measure creating the Brazilian Data Protection Authority, called the Autoridade Nacional de Proteção de Dados. "The act was highly anticipated by the market for a very clear reason: Without a data protection authority, there would be no one to regulate and supervise the effective compliance with the legislation, thus drastically reducing its efficiency, especially considering that a large part of the provisions of the LGPD demand further regulations, such as a definition on how to handle data breach notifications," writes Palhares Advogados Partner Felipe Palhares, CIPP/A, CIPP/C, CIPP/E, CIPP/US, CIPM, CIPT. In this post for Privacy Perspectives, Palhares looks at the measure, assesses the uncertainty that still remains, and ponders whether that will ultimately be a curse in disguise. Editor's Note: For more information on Brazil's new privacy law, check out the IAPP's Resource Center. 
Full Story