Last Thursday, 26/05, the National Data Protection Authority (ANPD) published its guidelines on the processing of personal data resulting from the collection of cookies on the Gov.br Portal.
These guidelines provide some valuable information on how the ANPD will behave on the subject (mainly for private companies) and we can already verify that the holder’s consent is being taken as the “main” legal basis, allowing exceptions to be made to the strictly necessary cookies, which may be based on legitimate interest.
The ANPD is preparing a guide on the subject, which will address, among others, the types of cookie categories and purposes; the legal bases of the LGPD; and good cookie collection practices for all personal data processing agents.