This Friday, Resolution CD/ANPD No. 15/2024 was published, defining the Regulations for Reporting Security Incidents, which has some differences in relation to what the ANPD itself had been practicing. The main divergences are:
Establishment of a period of 3 (three) business days from when the incident becomes known for communication.
Clearer definition of the type of incident that must be reported.
Specification of the form and content of communication to holders.
