The 2nd edition of Privacy Day addressed challenges and data protection in the context of hospitals and medical centers in Brazil
By Pedro Augusto
The General Data Protection Law (LGPD) in Brazil has completed six years and remains essential for digital security and personal data governance, creating a safer environment for consumers, businesses, and public entities. At the same time, the lack of a specific regulatory framework for artificial intelligence (AI) – currently under discussion in the Chamber of Deputies – has led the LGPD to serve as a reference for regulating the sector, outlining guidelines for the responsible use of data.
This connection between data protection and technological innovation was one of the highlights of the 2nd edition of Privacy Day, an event promoted by the Brazil-Canada Chamber of Commerce (CCBC), through the Compliance & ESG and Technology & Innovation Committees, in partnership with the National Association of Data Privacy Professionals.
Although the LGPD is a significant advancement in Brazilian legislation, awareness of its impacts still needs to evolve. According to the Cisco Consumer Privacy survey, released in October 2024, only 44% of Brazilians are aware of the LGPD – lower than the global average of 53%. However, among those familiar with the legislation, 81% believe their information is protected in the digital environment, an 11 percentage point increase since 2020, highlighting greater public awareness.
Paulo Perrotti, coordinator of the CCBC Compliance and ESG Committee, emphasized that the LGPD has been crucial in establishing guidelines for personal data protection. “Data protection is not only a legal obligation, but also a demonstration of our commitment to fundamental values that sustain our society: diversity, security, and respect for others,” he said.
Information security in the healthcare sector was one of the program highlights. Dr. Marcelo Jerez, CEO of Alphaview Medical Center and One Day Hospital, highlighted that “protecting the patient goes beyond healthcare, it also involves the security of their data.” For him, in the healthcare sector, extremely sensitive information such as medical history and genetic data, when exposed, can result in identification, discrimination, and personal harm. “Doctors are used to treating diseases, but they don’t always consider the patient’s complete journey, which includes everything from data collection to storage and sharing,” he warned.
This aspect becomes even more relevant with the growing adoption of Artificial Intelligence and automation in the sector. The need for ethical and transparent use of technology was emphasized by Priscilla Parodi, Chief Strategy Officer and co-founder of the technology company Mr. Turing. “Data privacy will always be relevant. In the healthcare sector, for example, protecting this information is not just a legal obligation, but also a matter of trust between companies and consumers,” she stated.
With the accelerated use of Artificial Intelligence, experts highlight the need for clear regulation that encourages innovation without compromising data protection. In this regard, Priscilla also commented on the potential of open-source AI models, such as DeepSeek – a Chinese generative AI chatbot – which can democratize access to technology and drive innovative solutions in the market. “Opening these models can make AI more accessible and encourage good practices in data collection and protection,” she said.
With the LGPD as a reference, Brazil has the opportunity to structure robust guidelines for Artificial Intelligence, aligning innovation, transparency, and data protection. Privacy Day 2024, promoted by the Brazil-Canada Chamber of Commerce, reinforced the importance of maintaining dialogue between companies, experts, and regulators, ensuring that digital transformations occur ethically and safely for all sectors of the economy.
Learn more about the Healthcare and Cybersecurity field by clicking here, and watch the full Privacy Day 2025 event (ESG & Sensitive Data) by clicking here.
