Controllers’ liability in cases of personal data breaches

The Superior Court of Justice (“STJ”, together with the Supreme Court, the two highest Brazilian courts) issued a decision last March restricting the controllers’ liability related to personal data breaches.   A claim seeking compensation for moral damages was filed by a consumer against a Brazilian power utility company due to a leakage of personal data, […]