Brazil: Issued ANPD ruling against Telekall regarding violations of LGPD

On 6 July 2023, the Brazilian National Data Protection Authority (ANPD) issued a ruling against Telekall Inforservice over the processing of personal data under the LGPD. The ANPD's General Inspection Coordination (CGF/ANPD) initiated an administrative sanction procedure after a complaint that Telekall had offered a list of WhatsApp contacts for campaign purposes during the 2020 municipal elections, and, after reviewing, has issued a sanction against Telekall for violating the Brazilian General Data Protection Law (LGPD) and the ANPD Inspection Regulation. The violations were related to the unauthorised processing of personal data and failure to appoint a data processing controller. Since Telekall is considered a microenterprise, the amount for each violation under Art.2 was limited to 2% of its gross turnover. Therefore, a fine of BRL 14'400 (around USD 3'000) was imposed. The decision may be appealed.