Claro's Data-Sharing Blunder: A Cautionary Tale for Companies Treating Customer Data Like Party Favors

What Did Claro Do Wrong?

Brazil's data protection authority, ANPD, has initiated a sanctioning process against telecom operator Claro for sharing customer personal data with credit bureau Serasa without proper legal basis. This isn't just a slap on the wrist—it could set a major precedent for data-sharing practices across Latin America.

The Gist of the Case

Claro allegedly transferred customer data to Serasa for credit scoring purposes without obtaining explicit consent or meeting other lawful grounds under the Brazilian General Data Protection Law (LGPD). The ANPD's move signals that even big players aren't immune to scrutiny.

Why This Matters for Your Business

If you're handling customer data, this case is a wake-up call. Sharing data with third parties—even for seemingly benign purposes like credit checks—requires a solid legal foundation. Think of it like lending your friend's car without asking: you might mean well, but it's still a violation of trust.

Key Takeaways from the ANPD's Action

• Consent is king: Unless you have a specific legal exception, you need clear, informed consent from users before sharing their data.
• Data minimization applies: Only share what's strictly necessary for the purpose.
• Accountability is non-negotiable: You must document your data-sharing activities and be ready to justify them.

What Could Happen to Claro?

Potential penalties include fines of up to 2% of Claro's revenue in Brazil (capped at R$50 million per violation), public warnings, or even a ban on processing certain data. The ANPD's decision will likely influence how other companies approach data sharing.

How to Avoid a Similar Fate

First, audit your data-sharing agreements. Second, ensure you have a lawful basis—usually consent or legitimate interest—and that you've informed users clearly. Third, implement technical safeguards like pseudonymization. And finally, remember that reading privacy policies should be less painful than cleaning grout with a toothbrush—make them clear and concise.

FAQ