On January 11, 2023, Law 14524/23, which establishes the CPF (Brazilian Individual Taxpayer Registry), was enacted by President Luiz Inácio Lula da Silva. According to this law, the CPF becomes the primary identifier for Brazilian citizens and the only one required in the public sphere. Its objective is to facilitate access to public services. Even though it is already in effect, a period for adaptation by responsible agencies and entities has been established.
- Municipal, state, and federal governments have a period of 12 months to adapt.
- The customer service systems and procedures, in turn, will take 24 months to integrate all the registrations.
What will happen to the documents?
Therefore, the new documents to be issued will carry the CPF number instead of another number. These documents include:
–RG
- Birth certificate
Marriage certificate
Death certificate
Voter registration card
National Identification Document
Employee Identification Number
Social Integration Program (PIS)
– National driver's license
– Work permit
- Passport
– National health card
Military Certificate
In situations where a citizen does not have a registered CPF (Brazilian taxpayer identification number), the issuing agency must register them.
President Luiz Inácio Lula da Silva vetoed the 90-day deadline for the regulation of the law. It was argued that it is unconstitutional for the legislature to set a deadline for the executive branch.
Brazilian Individual Taxpayer Registry (CPF) Law: What is its relationship with the LGPD (Brazilian General Data Protection Law)?
In reading the law, specifically article 6, the demonstration of the principles allows for a connection to be established with... LGPD with the third principle, that of necessity.
III - necessity: limitation of the treatment to the minimum necessary for the realization of its purposes, including two relevant data, providing and not excess in relation to the purposes of data treatment;
While other data may still be requested, its absence will not prevent any type of citizen request. Furthermore, less information will be collected for the system, thus exposing less information to potential attacks and vulnerabilities.
No need to upload other documents.
Some of the documents already mentioned no longer require a bag or wallet to be accessible. Voter registration cards can be carried on a cell phone and verified through an app. The same applies to other documents mentioned above.
Now that the CPF (Brazilian taxpayer ID) is the only identifier needed to complete requests, among other activities related to public services, less information will be collected by public agencies.
It is worth saying that hospitals And other establishments focused on serving citizens have been targets of cyberattacks. From this perspective, data minimization is also risk reduction.
