The National Data Protection Authority (ANPD) has determined the suspension of the processing of personal data by Meta. The objective of training the company's generative AI raises crucial questions about the limits of current legislation and the ethical use of these technologies. Still, it highlights the concern with the processing of data of more than 102 million holders in Brazil without due compliance with the General Data Protection Law (LGPD).
The case of Meta sheds light on the applicability of ANPD sanctions to any company that uses generative AI to process personal data. It is currently discussed whether these measures are specific to large corporations or signal a more rigorous approach that could extend to other technology operators.
Since the implementation of the LGPD in September 2020, Brazilian companies have been striving to adapt to the new regulatory requirements.However, according to the IT Trends Snapshot 2023 study by Logicalis, a global IT solutions and services company, only 36% stated that they are completely in compliance with the established standards.
Given this scenario, businesses specializing in legal advice for technology companies are seeking to understand how to ensure the responsible use of personal data without incurring similar penalties. SAFIE, a company founded in 2020 that offers legal infrastructure solutions, is one of them. Lucas Mantovani, Partner and Co-founder of SAFIE it can offer insights on how to take proactive steps to avoid regulatory risks, ensure AI practices are aligned with emerging legal standards, and comment on the future of privacy in Brazil.
Questions that can be addressed:
- What are the limits of current legislation regarding the use of personal data for AI training?
- What happened to Meta can happen to any company or just those using generative AI?
- How can companies prevent this type of sanction from the ANPD?
- Is there a way to make use of personal data to train generative AI without breaking the law?
- What can we expect from the legislative landscape and authorities in the coming years regarding generative AI and personal data protection?


