Flag of Brazil



Article 6

The processing of personal data activities shall observe the good faith and the following principles:

  • I - purpose: carrying out the treatment for legitimate, specific, explicit and informed purposes to the holder, without the possibility of further treatment incompatible with those purposes;
  • II - adequacy: compatibility of the treatment with the purposes informed to the proprietor, according to the treatment context;
  • III - need: limitation of the treatment to the minimum necessary for the accomplishment of its purposes, with the comprehensiveness of the relevant data, proportional and not excessive in relation to the purposes of the data processing;
  • IV - free access: guarantee to holders, free and easy consultation about the form and duration of treatment, as well as the completeness of their personal data;
  • V - data quality: guarantee to the owners, accuracy, clarity, relevance and updating of the data, according to the need and for the fulfillment of the purpose of its processing;
  • VI - transparency: guarantee to the holders, clear, accurate and easily accessible information about the treatment and the respective treatment agents, observing the commercial and industrial secrets;
  • VII - security: use of technical and administrative measures capable of protecting personal data from unauthorized access and accidental or unlawful destruction, loss, alteration, communication or dissemination;
  • VIII - prevention: adoption of measures to prevent the occurrence of damage due to the processing of personal data;
  • IX - non-discrimination: the impossibility of carrying out the treatment for illicit or abusive discriminatory purposes;
  • X - Responsibility and Accountability: Demonstration by the agent of the adoption of effective measures capable of proving observance and compliance with personal data protection rules, including the effectiveness of such measures.