News

Central Bank and ANPD are charged for actions against Pix data leakage

An investigation into the frequent leaks of Pix keys was requested by the Institute for Strategic Technology and Cash Cycle Studies (ITCN) recently. One craft was sent to the presidents of the Central Bank and the National Data Protection Authority (ANPD).

In the document, the entity asks for the initiation of an administrative process to investigate the circumstances of the leaks and for the BC to assess its own responsibility under the General Data Protection Law regarding the control and management of personal data in the instant payments ecosystem.

Image: Enildo Amaral/BCB

In addition, the ITCN requested special attention to the cases of Banese and Acesso, which took place in August and December 2021, respectively. “Bacen needs to implement exempt and independent control mechanisms, with active governance and results, in relation to the treatment of personal data in the Pix arrangement and in related transactions”, commented Mariana Chaimovich, legal advisor of the ITCN.

In addition to the entity, Procon-SP also asked the Central Bank for clarification on the leak of more than 160 Pix keys that were in the custody of Acesso Soluções de Pagamento on January 25, four days after the public announcement on the BC website.

At the time, the Central Bank said the data was not sensitive. Lawyers heard by ConJur reacted to the statement, stating that Bacen “borders on bad faith”.

Regardless of how sensitive, any data breached is one more piece (of a great fabric) that swindlers can use to deceive users, be it making loans, cloning messaging services or using personal data for any other purpose that harms the owner in some way. .

Pix leaks are ‘light’ and involve ‘insensitive’ data

In February, after yet another case of data leaks, Central Bank president Roberto Campos Neto said that Pix leaks will occur with “some frequency” and that the cases recorded so far are “mild”.

President of the Central Bank of Brazil, Roberto Campos Neto.

Photo: Raphael Ribeiro/BCB

Just last month, the Central Bank reported that it will no longer disclose cases of Pix key exposure by notices — the incidents will only be listed on the website. Despite the news, Campos Neto said that the municipality has adopted a more transparent stance in relation to other countries, when communicating leaks through your own website.

Related Articles

Leave a Reply

Your email address will not be published. Required fields are marked *