To support companies in preventing and managing incidents involving personal data, IAB Brasil has launched the “Personal Data Security Incident Guide”. The guide, which addresses a demand from various members, was developed by the Legal Affairs Working Group and also involved the participation and engagement of representatives from several companies. The material presents incident response guidelines, helping organizations comply with the requirements of the General Data Protection Law (LGPD) and strengthen their privacy governance.
Given the increasing digitalization of businesses and the growing challenges related to information security, the guide details best practices for preventing and mitigating risks. The document clarifies the role of data processing agents – controllers, operators, and data protection officers – and provides guidance on classifying incidents according to their impact and risk level.
The guide also explains the mandatory communication protocols, including notification to the National Data Protection Authority (ANPD) and data subjects in high-risk cases. IAB Brasil has developed a step-by-step guide for the proper reporting of incidents within the three-business-day timeframe, as stipulated by current legislation.
“Information security is an essential pillar for building digital trust. We developed this guide to empower companies and professionals to respond appropriately and efficiently to security incidents, ensuring transparency and mitigating damage,” says Denise Porto Hruby, CEO of IAB Brazil.
Available for download on the IAB Brasil website, the material can be accessed here.
