Company: BBD
Filing Date: 2025-03-31
Form Type: 20-F
Source: 0001292814-25-001244
Chunk: 62

Company: BANK BRADESCO
Filing Date: 2025-03-31
Form: 20-F
Item: Item 3
Chunk 62
---
 and financial charges may not exceed the original amount of the financed debt. This limitation applies to all credit card issuers and other post-paid payment instruments. The interest rate limitation provisions entered into effect on January 3, 2024.
 Therefore, future Brazilian court decisions involving discussions on interest rate limitations, as well as changes in legislation and regulations restricting interest rates charged by financial institutions, could have an adverse effect on our business.
 
3.D.20.06-08 We may incur penalties in case of non-compliance with data protection laws.
 In August 2018, Law No. 13,709/18 – General Data Protection Law (LGPD) was enacted, which creates a set of rules for the use, protection and transfer of personal data in Brazil, in the private and public spheres, and establishes responsibilities and penalties for agents who process personal data. In addition to including existing rules on the subject, the LGPD followed the global trend of strengthening the protection of personal data, restricting its unjustified use, and guaranteeing a series of rights to holders of data, as well as imposing important obligations on so-called “treatment agents”. In particular, the LGPD was inspired by recent European legislation on the subject, reproducing central points of Directive No. 95/46/EC and Regulation (EU) 2016/679 – General Data Protection Regulation (GDPR).
 The impact of this law has been significant, as any processing of personal data is subject to the rules imposed by the LGPD, whether physical or digital, by any entity that is established in Brazil or not that has collected personal data in Brazil or from any individual located in Brazil – even if not residents – or that offers goods and services to Brazilian consumers. In short, the adaptation to the LGPD requires continuous efforts in our relationships with clients, business partners, service providers and employees, and in virtually all areas of Brazilian society. The LGPD is in full force. The National Data Protection Authority (ANPD), the public administration body responsible for overseeing, implementing and supervising compliance with the LGPD, which has the power to apply sanctions in case of non-compliance since the publication of the CD/ANPD Resolution No. 4 on February 27, 2023. The National Council for the Protection of Personal Data and Privacy, ANPD’s advisory body, made up of members of civil society and representatives of public authorities, created by provisional measure converted into Law No. 13,583/19, is an additional enforcement body tasked with ensuring