Procon-MG fines RaiaDrogasil R$8.5 million for demanding CPF from customers

The constant capture of consumer consumption habits in a hidden way and without prior information represents a severe risk to the consumer’s intimacy and private life, in addition to subjecting them to risks of the most varied types.

In the event of any data leak, the purchase records of these medications (…) can be used by a health plan operator to deny coverage for “unreported pre-existing illness” or even an insurance company to deny coverage and an insurance policy due insurance or deny payment of compensation for the same reason.
Fernando Ferreira Abreu, prosecutor at the 14th Consumer Protection Prosecutor’s Office of Belo Horizonte

Raia reiterates that its practices are in compliance with the General Data Protection Law and that personal identification is the customer’s option. The company will appeal the decision.
RaiaDrogasil, in a note to Facto News

Risks of the practice, according to Procon-MG

Procon-MG cites the risk that data stored by RaiaDrogasil will be leaked in a hacker attack. The decision states that even “the most advanced security devices in the world” can be targeted. As an example, he mentions attacks on NASA, Pentagon, Facebook, Sony and Microsoft systems. “The defendant’s security system (RaiaDrogasil) is potentially vulnerable, as are all others.”

The leak could lead a health plan to deny coverage, says Procon-MG. By knowing what medications a person takes, services such as health insurance or life insurance could be denied.