DATA BREACH AND THE DATA BREACH AND THE LGPD: THE CIVIL LIABILITY OF CONTROLLERS AND OPERATORS FOR MORAL AND MATERIAL DAMAGES
DOI:
https://doi.org/10.66104/pgqvks52Keywords:
Privacy. Compensation. Information security. Personality rights.Abstract
The massive circulation of personal data, intensified by contemporary digital dynamics, repositions the legal debate surrounding information protection and the effects of its improper exposure. Data breach incidents are becoming increasingly common in discussions, not only due to the technical dimension involved, but above all because of the legal repercussions associated with the violation of individual rights. In this context, the General Data Protection Law (Law No. 13.709/2018) establishes normative parameters that govern data processing and delimit the actions of responsible agents, creating a field of analysis that requires articulation between civil liability and data protection. The relevance of this research stems from the need for a more organized understanding of these parameters, given the increasing litigation involving claims for damages resulting from the exposure of personal information. In this scenario, a certain difficulty is observed in defining the criteria for liability, especially when considering the distinct functions of controllers and operators. Thus, the central objective of this study is to analyze the civil liability of data processing agents in situations of personal data breaches, with an emphasis on the compensation for moral and material damages. To this end, a qualitative approach is adopted, developed through a literature review. As a possible contribution, the systematization of the legal foundations applicable to liability in these cases stands out, favoring a more consistent reading of the legislation and broadening the academic debate on the subject.
Downloads
References
BATISTELLA, André Rambo; ARAÚJO, Jailson de Souza. A Responsabilidade Civil Pelo Vazamento De Dados Nas Plataformas Digitais. Revista Rede de Direito Digital, Intelectual & Sociedade, v. 5, n. 10, p. 213-238, 2025. DOI: https://doi.org/10.5380/rrddis.v5i10.101030
BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Diário Oficial da União: seção 1, Brasília, DF, 15 ago. 2018.
BRASIL. Lei nº 8.078, de 11 de setembro de 1990. Código de Defesa do Consumidor. Diário Oficial da União: seção 1, Brasília, DF, 12 set. 1990.
CAPANEMA, Walter Aranha. A responsabilidade civil na Lei Geral de Proteção de Dados.Cadernos Jurídicos, São Paulo, ano, v. 21, p. 163-170, 2020.
CORRÊA, Yan Lucas Silva; ANDRADE, Henry Guilherme Ferreira. Responsabilidade Cívil Das Empresas E O Tratamento De Dados Pessoais: Proteção De Dados Pessoais E Responsabilidade Civil Dos Fornecedores De Serviços Ou Produtos Em Caso De Vazamento De Dados De Consumidores. Lumen Et Virtus, v. 16, n. 47, p. 3791-3804, 2025. DOI: https://doi.org/10.56238/levv16n47-062
LIMA, Glenna Farias; BANDEIRA, Leonardo Silva de Oliveira. A (Im) Possibilidade Do Reconhecimento Do Dano Presumido Por Vazamento De Dados Pessoais. Revista Contemporânea, v. 4, n. 10, p. e6145-e6145, 2024. DOI: https://doi.org/10.56083/RCV4N10-095
MEDINA, Maria Eduarda Lana. A LGPD e o fundamento da responsabilidade civil dos agentes de tratamento de dados pessoais: uma análise sobre o dano moral decorrente de vazamento de dados. Trabalho de Conclusão de Curso (Bacharelado em Direito)–Faculdade Nacional de Direito, Universidade Federal do Rio de Janeiro, Rio de Janeiro, 2021.
NOVAKOSKI, André Luis Mota; NASPOLINI, Samyra Haydêe Dal Farra. Responsabilidade civil na LGPD: problemas e soluções. Conpedi Law Review, Florianópolis, v. 6, n. 1, p. 158-174, 2020. DOI: https://doi.org/10.26668/2448-3931_conpedilawreview/2020.v6i1.7024
OLIVEIRA, Larissa de Jesus; NOVAIS, Thyara Gonçalves. Lei Geral de Proteção de Dados Pessoais: responsabilidade civil no vazamento de informações. Revista Ibero-Americana de Humanidades, Ciências e Educação, v. 10, n. 5, p. 1614-1631, 2024. DOI: https://doi.org/10.51891/rease.v10i5.13668
ROCHA, José Vinicius Pires; SILVA HORITA, Fernando Henrique. Vazamento de dados à luz da lei geral de proteção de dados pessoais: Responsabilidade civil dos fornecedores de serviços digitais. Revista Mato-grossense de Direito, v. 2, n. 1, p. 21-38, 2024
SANTOS, Italo Kelson Pereira; FREITAS, Gisela Carvalho. Vazamento De Dados Pessoais Em Tempos De Informação Instantânea. Revista Ibero-Americana de Humanidades, Ciências e Educação, v. 10, n. 6, p. 488-504, 2024. DOI: https://doi.org/10.51891/rease.v10i6.14400
SILVA, Anna Luiza Cardoso; SILVA, Bruna Barbosa; LEOCADIO, Luiza Cardozo.
Responsabilidade Civil No Vazamento De Dados. Revista Ibero-Americana de Humanidades, Ciências e Educação, v. 11, n. 11, p. 1765-1785, 2025. DOI: https://doi.org/10.51891/rease.v11i11.22167
SOUZA, Kenny Maiana Silva Novais; EDLER, Gabriel Octacílio Bohn. A responsabilidade civil pelo vazamento digital de dados sob a ótica do direito brasileiro. Revista Ibero-Americana de Humanidades, Ciências e Educação, v. 8, n. 5, p. 3119-3138, 2022. DOI: https://doi.org/10.51891/rease.v8i5.6048
Downloads
Published
Issue
Section
License
Copyright (c) 2026 João Matheus de Andrade Cruz , Melissa Vitória Bizerril Sá da Silva , Paulo Eduardo Queiroz da Costa
This work is licensed under a Creative Commons Attribution 4.0 International License.
Authors who publish in this journal agree to the following terms:
Authors retain copyright and grant the journal the right of first publication, with the work simultaneously licensed under the Creative Commons Attribution License, which permits the sharing of the work with proper acknowledgment of authorship and initial publication in this journal;
Authors are authorized to enter into separate, additional agreements for the non-exclusive distribution of the version of the work published in this journal (e.g., posting in an institutional repository or publishing it as a book chapter), provided that authorship and initial publication in this journal are properly acknowledged, and that the work is adapted to the template of the respective repository;
Authors are permitted and encouraged to post and distribute their work online (e.g., in institutional repositories or on their personal websites) at any point before or during the editorial process, as this may lead to productive exchanges and increase the impact and citation of the published work (see The Effect of Open Access);
Authors are responsible for correctly providing their personal information, including name, keywords, abstracts, and other relevant data, thereby defining how they wish to be cited. The journal’s editorial board is not responsible for any errors or inconsistencies in these records.
PRIVACY POLICY
The names and email addresses provided to this journal will be used exclusively for the purposes of this publication and will not be made available for any other purpose or to third parties.
Note: All content of the work is the sole responsibility of the author and the advisor.
