Brazil´s Law of Internet

The Project, now in Congress, establishes the principles, rights and duties of web users.

National Congress will soon appreciate the bill on the Internet, also called Marco Civil Internet, which provides the principles, rights and duties in using the World Wide Web.

The scope of the project includes users, companies and the government as well. For two years, between 2009 and 2011, and before it was formally established as a project of law by the Ministry of Justice, the issue was discussed by civil society organizations. In the process, it received more than 2000 contributions and 100 thousand accesses by Internet.

This project reinforces the constitutional principles as free speech, privacy and secrecy of communications, human rights, and the broad right of access to the internet for everyone.

It also establishes that the person, and the person only, will be held responsible for the content posted anywhere on the net is becoming liable for any damage caused, and exempting the provider or intermediary (websites, blogs, portals and social networks) from that liability. The service provider will only respond if it breaks a prior judicial decision determining the removal of content.

Another important point concerns the storage of data, and determines that the provider must store for a year the records of users' connection (IP of the computer - and time and date of access). Such data can only be obtained by court order, and this one year term of custody of records could be extended upon demand, be it by the police authority supporting the judiciary.

Net neutrality is another fundamental point, which requires ISPs to give undifferentiated treatment to all packets of data traffic on their networks. They may not favor certain Web sites over others, while providing them, for example, a faster access (faster band).

The state also confirms its role, reducing inequalities in Internet access and encouraging the use of the network as a tool for transparency and democracy. The project, however, does not cover issues such as copyright, cybercrime, and e-commerce.

To become law, the project must be approved by the House of Representatives and the Senate.

Hopefully it will be through and ready for the President´s approval by the end of the year.

Information Security in Brazil

Currently the demand for information grows by leaps; we have access to everything we need by the means of search engines, as well as access to information from organizations that are whether available on the Web or not; however the information is stored in virtual environments.

​​IT as well as information security within organizations are growing substantially, and the highly complex subject demands competence professional to control such a dynamic environment .

Ensure the information is not just master the technical part to safeguard the information of an organization, customers, suppliers and others relevant to a business. Information Security is also awareness. Employees need to be aware of the importance of information that flows within the company, be it verbal, written, electronic or otherwise.

Brazil, when it comes to this awareness and concern for rapid development on the subject, still has much to do. We have some initiatives from the Federal Government, as the GSI Instruction No. 01 13.06.2008, which regulates the Management of Information Security in the Federal Sphere; a Law Project to ensure the protection of personal data; the Ordinance of Denatran 1334/2010, which dictates that for it to function as a Central Management Unit (UGCs) it must have certification ISO 27001- System Management Information Security; and the Resolution 3658 of the National Land Transport - ANTT (Ministry of Transport) as to the electronic payment of freight - citing Management System Information Security.

About the protection of personal data, despite the constitutional provision, Brazil does not have anything specific on the subject, differentiating themselves from various countries that regulated the right of the citizen, such as the United States, Japan, Argentina, Chile, Uruguay, among others.

ISO 27001 provides the controls in its context, on protecting the privacy of personal information, intellectual property rights, physical and logical access controls,business continuity,to name a few.

Currently, Brazil has less than 30 companies certified in ISO27001.