IAB Brazil launches guide to managing security incidents with personal data

To support companies in the prevention and management of incidents involving personal data, IAB Brazil launched the “Guide for Security Incidents with Personal Data”. The guide, which meets a demand from several associates, was developed by the Legal Affairs Working Group and, in addition, was attended by and involved representatives of several companies. The material presents incident response guidelines, helping organizations to comply with the requirements of the General Data Protection Law (LGPD) and strengthen their privacy governance. 

In the face of the increasing digitization of business and the increasing challenges related to information security, the guide details best practices for preventing and mitigating risks. The document clarifies the role of data handling agents (controllers, operators and guardians & guides on the classification of incidents according to impact and level of risk.

The guide also explains the mandatory communication protocols, including notification to the National Data Protection Authority (ANPD) and the holders, in high-risk cases. The IAB Brazil has developed a step-by-step for the adequate reporting of occurrences within three working days, as provided for in current legislation.

“Information security is an essential pillar for building digital trust.We developed this guide to empower companies and professionals to respond appropriately and efficiently in the event of security incidents, ensuring transparency and mitigation of” damage, says Denise Porto Hruby, CEO of IAB Brazil.

Available for download on the IAB Brasil website, the material can be accessed here.