Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, announced the authorization of the Security Incident Communication Regulation, which aims to strengthen cybersecurity practices and increase transparency. The RCIS requires organizations to report security incidents that "may cause relevant risk or damage" to the ANPD and the data subject.