The DPDC has fined Brazil’s largest telecom company, Oi, BRL3.5 million (approx. £913,000) for failing to notify internet users that their browsing activities had been tracked and sold to third-party advertisers. The DPDC investigated allegations that Oi had developed an Internet activity monitoring program, which was being used to actively collect the browser data of broadband customers. This data was then sold by Oi to behavioural advertising companies without customers’ consent. This is the first enforcement action to be brought by the DPDC since Brazil’s internet law came into force in June 2014.

DPDC decision published 23 July 2014 (in Portuguese)