At some point, during the purchase of some medication at a pharmacy, you must have provided your CPF number in exchange for a discount. The practice, which seems harmless, has generated a lot of discussion over the last year about the use of data.
But after all, is it mandatory to give up personal data to get discounts and do justice to promotions in pharmacies?
see more
New RG: Online application? Clear your doubts and update your…
Approval of a Bill allows CNH for people with disabilities…
See too: Privacy: learn how to read messages on WhatsApp without anyone knowing
Recently, in 2020, the state of São Paulo enacted a law that prohibits the requirement of CPF in pharmacies and drugstores if the purpose of the request has not been informed to the customer.
Pharmacies are investigated in Brazil for the use of personal data
As they deal with personal data, pharmacies are required to comply with the LGPD. To avoid accumulation of information, holders have the right to know what happens to their information, as well as its purpose and the time that will be limited.
In this sense, the National Data Protection Authority (ANPD), a body created along with the General Data Protection Law, released a technical note on the processing of personal data in the pharmaceutical sector.
In the note, it is said that some practices related to the use of personal data were not in full compliance with the legislation, including the processing of personal data for purposes other than those indicated to the holders and indications of excessive data collection sensitive.
In addition, another issue discussed was the lack of transparency regarding data sharing with service providers and other business partners, such as those responsible for the popular loyalty.
Finally, it is highlighted that some retailers in the pharmaceutical sector have low data privacy protection for their customers.
The malicious use of data, in case of leaks, invasions or unauthorized access with third parties, includes:
- Identity theft;
- Data sales;
- Financial fraud;
- Opening fake accounts;
- Unsolicited marketing;
- Purchase tracking.
After all, am I obliged to inform my data to pharmacies?
Providing the CPF is a choice of the consumer. You are not obligated. Therefore, whenever they request your CPF or other document, question the motivations and purposes of the request.
In turn, pharmacies, according to ANVISA rules, must collect user personal data only in cases of controlled drugs such as antibiotics or psychotropic drugs.
In addition, you have the right to revoke the registration of your information and request the deletion of information provided at any time.