To print this article, all you need is to be registered or login on Mondaq.com. In order to comply with the Brazilian Data Protection Authority's (ANPD) regulatory schedule, which establishes that communication about data protection security incidents from the controller to the ANPD will be regulated by the end of the first semester of 2021, the ANPD published guidance on February 23, 2021. Firstly, it is important to mention that this guidance is not mandatory, considering that this topic is in a public consultation process, therefore it is possible that ANPD will make future changes. What should be considered as a security