In this edition of Cybernews, we highlight the main news on data protection in February and March 2025.
Firstly, the 2nd Chamber of the Superior Court of Justice (STJ in Portuguese) upheld the decision rejecting the mental distress claim for R$ 10 million made by a businesswoman who was arrested and alleged to have suffered excessive media exposure due to confidential information leaked by government agents.
Additionally, the 3rd Chamber determined that the IP address is sufficient for internet connection providers to provide users’ registration data, even without prior provision of a logical port (which allows the individualization and identification of users in cases of shared IP addresses) by internet application providers.
Finally, the 3rd Chamber also established the understanding that banks cannot be held liable for the “delivery boy scam” – in which third parties contact the victim, claiming that their card has been cloned and requesting that the consumer enter their password to unlock it – unless data leakage is proven.
