On November 25th, the LGPD and Football #Part 2 – The Attack event, promoted by Privacy Tools and presented by Ricardo Araújo, took place online and free of charge. Check out the main highlights!

Consent is not such a simple thing.

Fernanda Soares, from the company Lage e Portilho Jardim, reminded attendees during the event that, in addition to fines, football clubs can be prohibited from using data involved in incidents. "It can be partial, it can be complete, it can be temporary, but imagine what it will be like for a club prohibited from working with personal data?!"

"Consent is not a very simple legal basis to deal with. The LGPD (Brazilian General Data Protection Law) defines consent as a free, informed, and unequivocal expression of the data subject's will. The LGPD is inspired by the GDPR, but unlike the GDPR, the LGPD doesn't provide as many specifics; it doesn't explain as much, and it largely delegates the details to the national authority."

Clubs don't need to know everything about the audience.

Pedro Sousa, from B&M|Bichara e Motta Advogados, also mentioned the penalties. “A club that has many incidents involving data leaks will also suffer many administrative and financial sanctions, because the amount of the fine is not small…”

It's worth highlighting that football clubs handle large sums of money, which impacts the value of fines, as Pedro stated: "the fine is very high, and if this fine starts to become recurrent, it will increase. Therefore, for the club's own financial benefit, it should be diligent and avoid this amount of leaks because it will lose on both sides."

“I realized that companies started asking for more data, and data that is unnecessary for their activity, and I think there's a confusion there between data processing and data overload. The company thinks it has to know everything that's going on, all the data about that person, so that if it's eventually requested, it has it on hand, when in fact it's the opposite. In reality, you only need to have the data you need for that specific activity.”

Cultural change involves everyone: managers, fans, players.

Walter Calza, from Sport Club Corinthians, commented on the increase in court rulings involving personal data. “Here in São Paulo, there are already a thousand rulings mentioning the LGPD (Brazilian General Data Protection Law) at some point. The lawsuits are already happening. What we have to keep in mind is the issue of partnerships; you practically have to have a [partnership/organization] there.” due diligence "Who are you sharing your data with? Who is this partner that manages your loyal fan base?"

"The people who handle data today need to be trained; they need to understand that there has been a cultural shift, because we come from a culture where data belonged to companies."

To watch this event in its entirety, as well as other Privacy Tools live streams, Access the YouTube channel.!