CiberLATAMbywhalemate

Brazil ANPD pauses facial recognition in schools

The ANPD suspended facial recognition in Paraná public schools and opened a case over a breach that may have affected 500,000 patients.

Whalemate Labs · AI-assisted researchAug 12, 20262 min read

The ANPD has temporarily suspended facial recognition used to track student attendance in Paraná public schools, giving the state 10 business days to prove compliance. The measure is tied to the processing of biometric data from children and teenagers in the state public school system and cannot resume until the agency issues a new ruling.

The ANPD has temporarily suspended facial recognition used to track attendance in Paraná public schools and gave the state 10 business days to prove compliance. The measure is tied to the processing of biometric data from children and teenagers in the state public school network, and the system cannot be restarted until the authority issues a new ruling.

Measure affecting Paraná schools

Secondary coverage of the case said the decision applies to facial recognition in Paraná's state-run school network, with a focus on students in public schools. The key point was not a final sanction, but a precautionary suspension, along with a short deadline for proving the compliance required by the ANPD.

Another report reinforced that the main issue under review was the processing of biometric data from children and adolescents. It also said the system could not go back into operation until the ANPD makes a new decision. That leaves the matter open, but with an immediate restriction on the continuation of the attendance-control system.

Another enforcement track

At the same time, a legal newsletter reported that the ANPD opened an administrative sanctioning process over a security incident that may have affected personal data and sensitive data belonging to about 500,000 patients. The available material does not identify who was responsible in this window or provide more details about the episode, but it does confirm that the authority opened a formal enforcement track.

Taken together, the two moves point to a recent ANPD agenda centered on sensitive data and biometric uses, especially when they involve minors or security incidents involving large volumes of records.

Signals of regulatory activity

A commercial source also said that in June 2026 the ANPD opened 19 sanctioning proceedings, and that the violations observed were concentrated in the failure to appoint a data protection officer and the absence of a channel for data subject requests. That information appears in the material as unconfirmed independently, so it should be read as an attribution to that source, not as an official finding.

In the same period, the available sources include references to the LGPD, a review of the Dosimetry Regulation to align it with the Digital ECA and the Marco Civil da Internet, and data protection rules that remain under discussion. In this part of the material, there is no newly confirmed official inspection by the ANPD, but there is a sequence of regulatory actions and debates that keep Brazil's data protection front active.

Sources

View all