Privacy and Data Protection

Serpro Data Officer

The Personal Data Processing Officer is a role established in the LGPD [General Data Protection Act].

 The person who assumes this role must act as a communication channel between the institution, the data owners and the National Data Protection Authority (ANPD). The Officer is responsible for accessing data processing activities and understanding the life cycle of personal data in the company, making them compliant with the principles, rights, and other regulations contained in the Act.

At SERPRO this role is performed by the Personal Privacy and Data Protection Superintendence.

Officer Information
Alexandre Brandão Henriques Maimoni 
Legal, Governance, Management and Risks Director
Contact: encarregado@serpro.gov.br

Digital Privacy of the Citizen

Create your gov.br account and access the Digital Privacy of the Citizen site to exercise your rights as personal data owner. In case it is your first access, you may consult the Guidelines Manual for the detailed step-by-step. If you have any doubt on whether you are the “Owner” or not or who is the “Controller” or “Operator” of your data, consult Glossary.

Statement of compliance with the principles of data protection

 Serpro's mission is to connect government and society with digital solutions. One of the indispensable values in our operations is information security. Therefore, preserving the privacy and protecting the data of each Brazilian citizen is a daily responsibility.

We respect the right to privacy and are dedicated to using technology for the benefit of the state and society.

We understand privacy as a security feature in the way our services, systems, processes and professionals relate to our publics: clients and users. It is, mainly, a commitment to the legitimate expectation that you have regarding the discretion and preservation of your data.

The Serpro Statement of Compliance is based on the effective data protection laws in the country, in addition to our Corporate Information Security Policy.

Public information

Information may be considered public by legal or judicial determination and for shared use aimed at improving public policies. Data also becomes public as a security requirement, when necessary for the protection of life and in other situations described in this Statement.

Serpro is also concerned with publishing rules for the use of its services, due to their specificities, but always subject to the principles of this Statement and without detriment to the established contractual clauses.

Other provisions

The company is not responsible for malicious practices or misuse of content from other sites, as well as for failures in data security or illegalities committed by third parties, whether business partners or not.

Serpro is committed to offering the best in terms of information security to services, acquiring the most modern and effective resources, applying the methodologies designated as "best practices" and adopting all measures available for the security of your assets.