<\/p>\n
The Ministry of Labor and Employment enacted Ordinance MTE No. 1,419 on August 27, 2024<\/strong>, effective from May 2026, which expressly incorporated into Regulatory Standard No. 1 (“NR\u20111”) the requirement to include the mapping of psychosocial workplace risks within Occupational Risk Management (GRO) and the Risk Management Program (PGR).<\/p>\n The Standard, which previously focused more on preventing workplace accidents, expands its concept of a safe work environment to include elements of risk that had not been previously mapped but directly affect employees\u2019 performance and health.<\/p>\n With the new general guidelines established by NR\u20111 for occupational health and safety, companies are now required to identify and manage psychosocial risks\u2014such as stress, harassment, excessive workload and burnout\u2014thereby addressing factors that affect employees\u2019 mental health and adopting preventive and\/or corrective measures for identified risks.Noncompliance with NR\u20111 may result in fines and penalties for companies, depending on the severity of the infraction, the company\u2019s size and the number of employees.<\/p>\n Given these new processes, companies\u2019 processing of personal data and sensitive personal data will expand<\/strong>, and organizations must pay careful attention to privacy and to the assessment of third\u2011party providers contracted to assist with the NR\u20111 mapping.<\/p><\/blockquote>\n When dealing with sensitive data (such as information related to an employee\u2019s mental health), Article 5, II of the LGPD requires more robust governance by the data controller; once exposed, such data can cause harm and negative impacts to the data subject. In addition, the processing operation in question may be characterized as high\u2011risk processing if it meets the requirements of Article 4 of CD\/ANPD Resolution No. 2\/2022.<\/strong><\/p>\n In this manner, it is necessary for companies to be attentive so that compliance with the General Data Protection Law is observed in this new context of processing, and that privacy protection is incorporated from the outset into the infrastructures of the technologies adopted or developed to comply with the standard in question.<\/p>\n Furthermore, one of the most important aspects of implementing this process will be due diligence of the involved vendor, to verify adherence to required levels of privacy, security and compliance.<\/p>\n In light of the recent regulatory updates, Peck Advogados has a team of specialists with broad experience in privacy and contractual risk management ready to support organizations with strategic alignment.<\/p>\n For more information or to schedule a conversation with our specialists, contact us at contato@peckadv.com.br<\/em>.<\/p>\n Prepared by:<\/strong> Dr. Graziella Rosa, Head of Digital Advisory, and Dr. Bianca Melo da Cruz, Digital Advisory Attorney.<\/p>\n <\/p>","protected":false},"excerpt":{"rendered":" The Ministry of Labor and Employment enacted Ordinance MTE No. 1,419 on August 27, 2024, effective from May 2026, which expressly incorporated into Regulatory Standard […]<\/p>\n","protected":false},"author":3,"featured_media":1927,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[38],"class_list":["post-2158","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-noticias","tag-consultivo-digital-contratos-e-pareceres"],"acf":[],"yoast_head":"\n