Digital transformation has profoundly changed the way companies collect, store, share and use information. Personal data has become a strategic asset for organizations of all sizes and sectors, driving business models, marketing initiatives, internal processes and technology-based decision making. In this context, the Brazilian General Data Protection Law, Law No. 13,709/2018, has become one of the most relevant regulatory frameworks within the Brazilian business environment.

The recent action by Brazil’s National Data Protection Authority (ANPD) in the case involving the retail chain Havan, which released...