Company: BBD
Filing Date: 2025-05-30
Form Type: 6-K
Source: 0001292814-25-002283
Chunk: 132

Company: BANK BRADESCO
Filing Date: 2025-05-30
Form: 6-K
Chunk 132
---
, the adaptation
to the LGPD requires the adoption of continuous efforts in our customer relationship, business partners, service providers and employees,
and in virtually all internal areas of Brazilian companies. The LGPD (General Data Protection Law) is fully in effect, along with the
National Data Protection Authority (ANPD), a public administration body responsible for safeguarding, implementing, and overseeing compliance
with the LGPD, with full authority to apply sanctions since the publication of Resolution CD/ANPD No. 4/23 on February 27, 2023, and the
National Council for Personal Data Protection and Privacy, the ANPD advisory body, composed of civil society members and representatives
of the government, created by a provisional measure converted into Law No. 13,583/19.

We operate
in a preventive, detective and corrective manner in order to protect our own and our clients’ information.

However,
possible failures or attacks on our systems and processes can lead to the occurrence of security incidents. Eventually, it can be understood
that there was no compliance with the LGPD, which could result in the application of administrative sanctions provided for in the LGPD,
namely (i) warning, with a deadline to adopt corrective measures; (ii) a fine of up to 2% of the revenues (net of taxes) of the offending
company or its group or conglomerate in Brazil, as determined in its last fiscal year, limited to R$50 million per violation; (iii) daily
fine, limited to R$50 million per violation; (iv) publication of the violation; (v) blocking of all personal data involved in the violation
until the infringement is regularized; (vi) exclusion of the personal data involved in the violation; (vii) partial suspension of the
database operation involved in the violation for up to six months, which can be extended for a further similar period, until the activity
of the infringing company becomes compliant; (viii) suspension of the activities of personal data processing involved in the violation
for up to six months, which can be extended for a further similar period; and (ix) partial or total prohibition of activities involving
the processing of data. In addition to the administrative sanctions provided for in the LGPD, we can also be held responsible for the
financial costs of any remediation or reparation efforts related to any compromised third parties.

In addition,
other authorities in Brazil may apply the LGPD through administrative procedures or lawsuits. The Consumer Protection and