LGPD Art.26-27: Arts. 26 and 27: Shared use of public data and transfers to private entities

What does Art.26-27 require?

Shared use of personal data by public authorities must serve specific purposes of executing public policies and legal attributions and respect the Art. 6 principles. Public authorities may not transfer personal data in their databases to private entities except: for decentralised execution of a public activity requiring the transfer, solely for that purpose; where the data are publicly accessible; where a legal provision, contract, agreement or similar instrument supports it; or where the transfer aims exclusively at preventing fraud and irregularities or protecting the data subject's security and integrity, with processing for other purposes prohibited. Such contracts and agreements must be communicated to the ANPD. Communication or shared use of personal data from a public body to a private entity must be reported to the ANPD and needs the data subject's consent except under a consent exemption, shared use made public under Art. 23 I, or the Art. 26 exceptions.