Justice Flávio Dino of the Brazilian Supreme Federal Court (STF) has partially suspended the state law authorizing the privatization of Celepar, Paraná’s Information and Communication Technology Company. This decision effectively halts all administrative actions related to the company’s divestment until a further deliberation by the full Court. The minister has submitted his preliminary injunction for ratification by the STF plenary.
The suspension stems from concerns that the existing state legislation currently lacks the necessary provisions to adequately ensure the fundamental right to personal data protection. This critical legal challenge was initiated by the Workers’ Party (PT) and the Socialism and Liberty Party (PSOL), highlighting the potential vulnerabilities associated with transferring public data to private control.
The ruling underscores a significant moment in the intersection of state-owned enterprises and digital rights, as the Court now weighs the balance between economic policy and the constitutional safeguards for citizens’ personal information. The legal landscape for similar privatization efforts across Brazil may also see broader implications.
STF minister halts Celepar sale over privacy concerns
Minister Dino’s decision highlighted that the law, in its current form, does not adequately address the intricate challenges of data governance during a corporate transition. He emphasized that personal data, especially sensitive information, warrants the utmost protection and vigilance from the state.
The generic nature of the law concerning the alienation of Celepar’s share control, and subsequently the transfer and processing of data, made it impossible for the minister to conclude that fundamental data protection rights would be effectively upheld. This generic wording creates a legal vacuum regarding citizens’ digital safety.
The essential role of Celepar in Paraná’s data infrastructure
Founded in 1964, Celepar holds historical significance as the first public technology company in Brazil, playing a foundational role in the country’s digital infrastructure. It is entrusted with the immense responsibility of managing and securing a vast array of public data belonging to the citizens of Paraná.
This critical data includes sensitive records such as tax information, traffic fines, and comprehensive medical histories. The company’s operations are deeply intertwined with essential government services, making any change in its control a matter of profound public interest and security.
Legal arguments emphasize federal data protection authority
In their action challenging the law’s constitutionality, the PT and PSOL contended that the state law infringed upon the Union’s exclusive jurisdiction to legislate on personal data protection and processing. This argument centers on the principle that national standards are paramount for safeguarding sensitive information across states.
The parties further asserted that the state legislation directly violated the fundamental right to data protection, a right increasingly recognized globally as essential in the digital age. They argued that any privatization must align with the highest standards of data security and privacy.
This contention highlights a growing legal and political debate regarding the scope of state versus federal powers in regulating modern technological enterprises, especially those handling public data. Ensuring uniformity and robust protection across the nation remains a key concern for federal legislators.
Data protection as a fundamental right: Minister Dino’s view
Minister Dino underscored the undeniable premise that personal data, particularly sensitive categories, demands maximum protection and caution from the state. He clarified that this is not merely a routine corporate transaction involving a commercial entity.
The minister articulated that the operation directly involves the fundamental rights of Paraná’s citizens, as mandated by the Federal Constitution and regulations from the National Congress and the National Data Protection Authority (ANPD). These rights encompass crucial dimensions such as privacy and protection against discrimination.
He further elaborated on the global context, noting that control over personal data, particularly sensitive types, is a universally debated topic of increasing importance. Consequently, it is subject to stringent public policies in numerous sovereign nations, reflecting a global commitment to digital rights.
The decision reinforces the judiciary’s role in ensuring that public policy, even in economic matters, does not compromise the constitutional guarantees of citizens in the digital sphere.
Prior warnings from the Paraná State Audit Court
Minister Dino’s decision was also informed by previous findings from the Paraná State Audit Court (TCE-PR), which had already identified deficiencies in the privatization process. The TCE-PR had concluded that there was a “lack of studies and minimum actions for reducing the risks” stemming from the state’s relinquishment of control over Celepar.
The minister noted that despite successive TCE-PR decisions that led to interruptions in the divestment process, the privatization had been resumed without these critical aspects being resolved. This situation, for Dino, created an “undesirable scenario of legal uncertainty,” extending even to potential future participants in the privatization.
Mandatory data impact assessment for future steps
Based on the “danger of delay,” Minister Dino partially granted the injunction. He explicitly ruled that any further desatization of Celepar must strictly adhere to federal personal data protection legislation.
Crucially, before the privatization can proceed, the state of Paraná is now mandated to prepare a specific “personal data protection impact report” for the corporate transition. This comprehensive report must then be submitted to the National Data Protection Authority (ANPD) for review and approval.
Next steps: Plenary review awaits final decision
Should these requirements be demonstrably met, the case will return for a reevaluation of the preliminary injunction or a full merits review. The temporary suspension by Justice Dino now awaits a definitive decision from the full STF plenary.
