Telekall Infoservice

What happened

Brazil's ANPD issued its first-ever LGPD fine against Telekall Infoservice, a small telemarketing company, totaling R$14,400 (approximately $2,880 USD). The microenterprise was found to have offered a list of WhatsApp contacts of voters to political candidates during the 2020 municipal election campaign, processing personal data (phone numbers) without a valid legal basis. The ANPD also found that Telekall failed to appoint a Data Protection Officer as required by LGPD. While the fine amount is small by international standards, the case was historically significant as the first administrative sanction under Brazil's data protection law, marking the beginning of active LGPD enforcement. The ANPD applied a proportionate penalty considering the company's micro-enterprise status.

Articles violated

Lessons learned

Even microenterprises are subject to data protection law enforcement. Selling or sharing personal data (phone numbers, contacts) for political campaigning without consent is unlawful. Every company processing personal data must appoint a Data Protection Officer or equivalent. Brazil's LGPD enforcement is nascent but expanding — early cases set precedents for future, larger enforcement actions. Companies should prepare for LGPD compliance proactively rather than waiting for enforcement to escalate.