Enforcement action · Autoridade Nacional de Proteção de Dados (ANPD)

ANPD v. Claro and Serasa

ANPD v. Claro and Serasa is an AI-related enforcement action involving Autoridade Nacional de Proteção de Dados (ANPD). Penalty: monetary_fine of $R$ 50,000,000. Brazil's ANPD has initiated an administrative sanctioning process against Claro for alleged LGPD violations in data sharing with Serasa, and an investigation into Serasa's transparency.

Action details

Agency
Autoridade Nacional de Proteção de Dados (ANPD)
Jurisdiction
BR
Enforcement type
complaint
Document type
enforcement action
Penalty
$R$ 50,000,000 monetary_fine
Topic
ai privacy

Summary

Brazil's National Data Protection Authority (ANPD) has begun an administrative sanctioning process against telecommunications operator Claro for alleged violations of the General Data Protection Law (LGPD). Claro is accused of excessive data sharing with credit analysis company Serasa, lack of transparency with clients, and hindering access to its Data Protection Officer. If proven, Claro could face fines up to R$50 million per infraction or 2% of its revenue. Separately, Serasa is undergoing a new fiscalization process focusing on its data transparency and mechanisms for data subject rights. Both companies have 10 business days to present their defense, with failure to respond potentially leading to additional sanctions.

Primary source

https://www.gov.br/anpd/pt-br/assuntos/noticias/copy_of_anpd-inicia-processo-para-sancionar-claro-por-irregularidades-no-compartilhamento-de-dados-pessoais-de-clientes-com-a-serasa →

Frequently asked questions

What is ANPD v. Claro and Serasa?
Brazil's National Data Protection Authority (ANPD) has begun an administrative sanctioning process against telecommunications operator Claro for alleged violations of the General Data Protection Law (LGPD). Claro is accused of excessive data sharing with credit analysis company Serasa, lack of transparency with clients, and hindering access to its Data Protection Officer. If proven, Claro could face fines up to R$50 million per infraction or 2% of its revenue. Separately, Serasa is undergoing a new fiscalization process focusing on its data transparency and mechanisms for data subject rights. Both companies have 10 business days to present their defense, with failure to respond potentially leading to additional sanctions. Primary source →
Which agency brought the action?
Autoridade Nacional de Proteção de Dados (ANPD) brought this enforcement action in BR. Primary source →
What was the penalty?
The disclosed penalty is a monetary_fine amount of $R$ 50,000,000. Primary source →
When did the action take effect?
The most recent activity on this action was published on 6/8/2026. Primary source →
Where can I find the primary source?
The primary source for ANPD v. Claro and Serasa is at https://www.gov.br/anpd/pt-br/assuntos/noticias/copy_of_anpd-inicia-processo-para-sancionar-claro-por-irregularidades-no-compartilhamento-de-dados-pessoais-de-clientes-com-a-serasa. AIGI does not paraphrase secondary commentary — every claim on this page links back to that primary source. Primary source →

Stay informed

Get every Autoridade Nacional de Proteção de Dados (ANPD) AI enforcement update.

Start 14-day trial →