orderConcluded
Autoridade Nacional de Protecao de Dados (ANPD) — RaiaDrogasil and Febrafar (pharmacy chains)
February 5, 2025 · Brazil
ANPD concluded its inspection of pharmacy chains, applying preventive measures and opening a sanctioning process against RaiaDrogasil over biometric authentication in its loyalty program, ordering a non-biometric identity-verification alternative under the LGPD.
Key takeaway — how to prevent this
Biometric data (faces, iris, fingerprints) needs an explicit lawful basis or consent. Scraping or capturing it without one is unlawful across the EU/UK and many US states (e.g. Illinois BIPA) — and draws the largest fines.
Inclusion does not imply wrongdoing or liability. Status reflects the latest information we have — always check the official source for current status.