Brazil: Announced Procon-SP investigation into Ticketmaster’s data processing policy and response to data breaches

Description

Announced Procon-SP investigation into Ticketmaster’s data processing policy and response to data breaches

On 3 June 2024, the Brazilian consumer protection authority Procon-SP announced an investigation into Ticketmaster regarding a potential data leak affecting Brazilian consumers. The investigation seeks to determine the extent of the data breach, specifically requesting details on the capture and storage of consumer data, the number of Brazilian consumers potentially affected, and Ticketmaster's compliance with the Brazilian General Data Protection Law (LGPD). Additionally, Procon-SP is inquiring about Ticketmaster's data-sharing practices with commercial partners and the existence of an incident response team, alongside the measures taken to mitigate damages and notify affected Brazilian consumers. The Ticketmaster is required to respond to these inquiries within 48 hours of the announcement date.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
platform intermediary: e-commerce
Implementation Level
national
Government Branch
executive
Government Body
consumer protection authority

Complete timeline of this policy change

Hide details
2024-06-03
under deliberation

On 3 June 2024, the Brazilian consumer protection authority Procon-SP announced an investigation in…

2024-06-11
under investigation

On 11 June 2024, the Consumer Protection Authority of the State of São Paulo (Procon-SP) announced …