Important announcement for those who provide their CPF when refueling at gas stations!

Recently, it has become a frequent practice in gas stations Brazil requires CPF from consumers during transactions. This measure, according to large companies such as Ipiranga, Petrobras and Shell, should bring benefits and discounts to customers. On the other hand, this practice has sparked strong debates about privacy and compliance with data protection laws.

adoption General Data Protection Regulation (LGPD)which came into effect in September 2020, brought new requirements for the collection and use of CPF And other personal data. The law stipulates that collecting this information requires the explicit, clear and informed consent of the consumer, under penalty of severe penalties for violating companies.

What does the LGPD law mean for CPF collection?

a General Data Protection Regulationdesigned to enhance the protection of personal data of residents in Brazil, Highlights CPF As sensitive information. Therefore, to collect and process it, it is necessary to obtain prior and well-explained consent. The legislation aims to promote the responsible use of this data, and to ensure transparency and security, in order to prevent misuse and exposure that could put at risk Consumer at risk.

How could your privacy be at risk?

The lack of privacy at gas stations can expose you to a variety of risks, both financial and related to your privacy:

1. Fraud and card cloning: Criminals can access and misuse your payment details.
2. Track consumption: Your purchase information can be analyzed to create personalized consumption profiles.
3. Data Sale: Your data may be sold without your consent, increasing the risk of spam and harassment due to unwanted communications.

How do you protect yourself from misuse of your data?

Guide to protecting your personal data:

1. Beware of sharing data:

• Gas station: Prefer to pay in cash at establishments that appear unsafe or do not convey trust.
• websites: Always check the security of a website before making online payments. Look for the padlock in the address bar and “https://” at the beginning of the link.
• Messages and calls: Beware of messages or calls asking for your personal or banking details, even if they appear to be from well-known companies. Never provide confidential information through these means.

2. Monitor your accounts and cards:

• Invoice card: Check your bill regularly for any suspicious or unknown transactions.
• Bank statement: Monitor your bank statement and be aware of any transactions you did not make.
• Credit Protection Services: Use services like Serasa or SPC to monitor your CPF and receive alerts about suspicious inquiries and movements.

3. Protect your devices:

• Strong passwords: Use strong, different passwords for each online account and service.
• Antivirus and Firewall: Keep your computer and cell phone protected with modern security software.
• Updates: Keep your operating systems and applications updated to fix security vulnerabilities.

4. Beware of public Wi-Fi networks:

• Avoid sensitive transactions: Do not make purchases or access bank accounts on public Wi-Fi networks, as they may be unsecure.
• Use a VPN: If you need to access sensitive information on public Wi-Fi, use a virtual private network (VPN) to encrypt your data.

5. Reporting violations:

• Procon: In case your data is misused by companies, contact Procon to register a complaint.
• National Data Protection Authority (ANPD): The ANPD is responsible for monitoring compliance with the General Data Protection Regulation (LGPD) and receiving reports of violations.

Remember if: Protecting your data is your right. Be careful about sharing personal information and watch for signs of misuse.

The authorities' position on this issue

The National Data Protection Authority (ANPD) has intensified its inspections to ensure that companies comply with the LGPD. In addition, specific state standards, such as Law 17,301/2020 From São Paulo, it already prohibits the unjustified collection of CPF. These regulations reflect the need to strengthen consumer confidence regarding their privacy and their rights as data subjects.

Protection of personal data: a right for every consumer

It is essential that everyone is aware of and exercises their rights in relation to data protection. If they become aware that their data has been handled inappropriately, they have the right to request that that data be corrected or deleted. All companies should provide a transparent and accessible process for this, through their privacy portals.

Awareness and action It is essential to ensure that personal information is handled ethically and legally, thus balancing commercial benefits and data protection.