Annual Report 2021
Consolidation and expansion. These are the two words that best define the second year of existence of Data Privacy Brasil Research Association. After experiencing intense growth throughout 2020, we organized our headquarters, improved our management processes, and achieved even more significant capacity for political advocacy in Brazil and international articulation. Thanks to remote work, we stopped being an organization of academic-activists based in São Paulo and incorporated people from Porto Alegre, Brasília, Salvador, Belo Horizonte, Rio de Janeiro, and several other cities, from Brazilian South to the Northeast regions, into the team. The Brasil in our name improved its foundation base.
Our Association is made up of the passion of people who believe in research in the public interest and by funders committed to ethics in supporting research and to social justice and democracy. And it was with this passion that we worked throughout 2021.
From a research point of view, we finished our first temporary projects and strengthened the base of permanent projects alongside partners in distinct fields. This model helped us to amplify the capacity for reflection and investigation, within a concept according to which the protection of personal data cannot be understood as an isolated area but permeated by diverse issues regarding social justice.
We also have established firm and constant points of contact with Brazilian public policy makers at various levels. In addition, we have intensified our internationalization with partnerships with organizations from the Global South in an exchange process in which we share the Brazilian experience linked to the defense of digital rights and absorb the experience of countries with a socioeconomic reality similar to the Brazilian.
2021 in figures
mentions in Brazilian and international media
participations in events in Brazil and worldwide
publications, including e-books, academic and opinion articles, research reports, etc.
podcast episodes released
online debates held, between lives and webinars
participations in public hearings in the Executive and Legislative Branches
Governance and Regulation
Accountability and Digital Civil Identity
Digital civil identity systems have been discussed since the 1990s in Brazil. Faced with the risks of the concentration of information in a single governmental database and its sharing within the public power and with the private sector, we analyze the national initiatives of the type that are in the implementation phase. Among other activities, we organized a workshop on accountability instruments and digital civil identity systems, with the participation of the ANPD (National Authority of Data Protection), the Digital Government Secretariat and the Superior Electoral Court (TSE).
China: technology and society
Doublethink Lab (DTL), an organization based in Taiwan, invited us to coordinate in South America the activities of this project that seeks to build an interactive global map on China's influence in different countries within nine areas: academia, economics, legal, media, military, domestic policy, foreign policy, society, and technology. For this, we work within Brazil, Argentina, Bolivia, Paraguay, and Uruguay.
International forums and networks
This project was consolidated in 2021 as a starting point for a continuous effort for our ONG to enter international discussion spaces. In this way, we participate in the OECD's Civil Society Advisory Council for Digital Economy Issues (CISAC), in the Civil Society Forum for Collaboration with Data Protection Authorities of the Ibero-American Data Protection Network, and in events such as the Internet Governance Forum (IGF), RightsCon and the OECD Observatory of Civic Space.
Privacy and Data Protection Observatory
This is a permanent project, born together with the Association, which matured during 2021. We carried out an extensive survey of how privacy and data protection have been viewed by the Brazilian Legislative in the last four decades, the result of which was presented by a series of dynamic infographics, and we have produced an interactive game about legitimate interest. We also released a series of technical notes and produced contributions to the grant making of ANPD (National Authority of Data Protection).
The ten years of the CGI.br’s Privacy and Personal Data Protection Seminar
In the second phase of the research on the impact of the CGI.br Seminar on the privacy and data protection agenda in Brazil, we conducted interviews with 22 people from different sectors who somehow participated or were influenced by these first ten years of the Seminar. In addition, we published the article “Planting seeds: the role of the CGI.br Seminar in building a privacy and personal data protection agenda in Brazil (2010-2019)” in PoliTICs magazine.
Asymmetries and Power
Borders, Technology and Human Rights: opening border control programs to citizen participation
On the triple border between Argentina, Brazil and Paraguay, the Integrated Border Operations Center (CIOF) is a mystery. In this project, in which we work alongside the Paraguayan NGO TEDIC, we seek to understand and reveal how the CIOF works, coordinated by the Secretariat for Integrated Operations of the Brazilian Ministry of Justice and Public Security. In February 2022, we published “The Invisible Operation - A study on the Integrated Center for Border Operations”, the final report of the project, developed from the research conducted in 2021.
Defending Brazil from techno-authoritarianism
Created to understand and resist the use of technologies as levers of authoritarian practices, the project had a strong presence in strategic litigation, with workshops aimed at civil society and participation as amicus curiae in Direct Action of Unconstitutionality (ADI) 6649, on the sharing of personal data within the federal government. In addition, it resulted in a series of media products such as podcasts, mini-documentaries, and a special edition of Quatro Cinco Um magazine.
Expanding the role of Public Defender’s Offices in protecting personal data in Brazil
most vulnerable part of the Brazilian population. Therefore, we have worked alongside public defenders from all over the country to increase knowledge about the obligations that the General Personal Data Protection Act (LGPD) brings to the routine of Offices of State Public Defenders (DPEs), as well as how these public servants can help the population in the defense of their data. In this sense, we have published the “First Steps Guide for adapting Offices of the Public Defenders to the LGPD.”
New frontiers of digital law
This project unfolded on three fronts that open up the complexity of the legal discussion on the use of personal data and how these uses can become a risk to fundamental freedoms: normative structure of data law in the criminal sphere, use of data in the fight against Covid-19 and the problems of photographic identification in police investigations. One of the results of the project was the platform “Os Dados Virais” (“The Viral Data”), on the use of technologies to fight the pandemic in Brazil.
Digital Platforms and Markets
Antitrust and regulation in the digital economy
Brazilian antitrust regulation does not necessarily consider the impact of personal data in mergers and acquisitions processes. To shed light on this issue, we created a course on the topic, took the discussion to the Internet Forum in Brazil, followed debates at the Brazilian Antitrust Authority (CADE) and ANPD (National Authority of Data Protection), assisted in a process of the Brazilian Consumer Protection Institute (Idec) on the case involving Google and FitBit and launched the publication “A Multijurisdictional Analysis Of Data-Driven Mergers: Current Assessment And Public Policy Proposals For Brazil”, by Lucas Griebeler da Motta.
Protection of personal data and childhood
In 2021, we consolidated the monitoring of the debate about the regulation of various topics at the intersection between childhood and data protection. The practical result of this was the publication of the Childhood and Privacy Bulletin (BIP), in partnership with Alana Institute, with an analysis of the main events related to this universe mapped over a period of eight months, starting in August 2020. We also promoted a series of initiatives to leverage the childhood data protection agenda, such as podcast episodes, lives, webinars, and articles.
The source of funding is a crucial element for a non-profit organization. Therefore, in 2020, we designed a policy with clear criteria to assess the pertinence or otherwise of receiving funds, whether public, private or from philanthropic sources. The central point of these rules is to guarantee our autonomy and independence in the development of research and other activities.
We also have a Group of Independent Reviewers, responsible for previously analyzing donations received that exceeded BRL 200,000.00, to ensure that this funding would not interfere with the independence or ethical commitment of our Association. This year, we updated the policy, bringing it into line with the rules set out in our Conflict-of-Interest Policy.
In 2021, we worked with a slightly reduced budget compared to the previous year: BRL 2.37 million in comparison with BRL 2.92 million. This did not, however, prevented us from distributing investments in a greater volume of projects, as well as expanding our team, which increased from 20 to 31 employees.
Distribution by type of funder
DataPrivacyBr Research | Content under licensing CC BY-SA 4.0