Brazil: National Data Protection Authority opened consultation as part of its inquiry into processing of biometric data

On 2 June 2025, the Brazilian National Data Protection Authority (ANPD) opened a consultation as part of its inquiry into the processing of biometric data, until 2 July 2025. The inquiry is part of item 5 on the ANPD's Regulatory Agenda for the 2025/2026 biennium and aims to analyse the necessity of regulatory intervention, considering the potential for either specific regulation or a guidance document. Under the General Data Protection Law (LGPD), biometric data is classified as sensitive personal data, subject to additional protections due to the inherent risks it poses to privacy and the rights of data subjects. The ANPD aims to gather information on legal justifications for processing biometric data, particularly focusing on facial recognition and the application of novel and developing technologies. Further areas include governance frameworks and good practices applicable to this data type, as well as considerations for the rights of data subjects and specific attention to vulnerable groups. The ANPD intends to utilise the gathered information to guide its regulatory approach and ensure appropriate safeguards are in place.