Company: BBD
Filing Date: 2025-03-31
Form Type: 20-F
Source: 0001292814-25-001244
Chunk: 63

Company: BANK BRADESCO
Filing Date: 2025-03-31
Form: 20-F
Item: Item 3
Chunk 63
---
 compliance with the LGPD.

25 – Form 20-F 2024 | Bradesco
------------------------------
We operate in a preventive, detective and corrective manner in order to protect our own and our clients’ information. For more information see on data processing and cybersecurity, see “Item 4.B. Business Overview – 4.B.20 Business Management - 4.B.20.04 Data Processing” and “Item 16.K Cybersecurity”.
 However, possible flaws in or attacks on our systems and processes could lead to security incidents. We may also be found not to be compliant with the LGPD, which could result in the application of administrative sanctions provided for in the LGPD, namely (i) warnings, with a deadline to adopt corrective measures; (ii) fines of up to 2% of the turnover (net of taxes) of the offending company or its group or conglomerate in Brazil, as determined in its last fiscal year, limited to R$50 million per violation; (iii) daily fines, limited to R$50 million per violation; (iv) publication of the violation; (v) blocking of the personal data involved in the breach until the breach is settled; (vi) deletion of the personal data involved in the breach; (vii) partial suspension of the operation of the database involved in the breach for up to six months, extendable for the same period, until the offending company’s activity is in compliance; (viii) suspension of the personal data processing activities involved in the breach for up to six months, extendable for the same period; and (ix) partial or total prohibition on carrying out data processing activities. In addition to the administrative sanctions provided for in the LGPD, we may also be liable for the financial costs of any remediation or reparation efforts relating to any compromised third parties.
 In addition, other authorities in Brazil can enforce the LGPD through administrative procedures or lawsuits. The Consumer Protection and Defense Program (PROCON) or the Public Prosecutor’s Office responsible for consumer rights, as well as individuals and private or non-governmental associations, for example, can file complaints or lawsuits based on violations of the LGPD that have caused or may cause harm to individuals. Likewise, data subjects who have been harmed can file individual lawsuits seeking compensation.
 Any non-compliance with the LGPD can also negatively affect our reputation, our financial condition, the result of our operations and the market value of our shares and ADSs. See item “3.D.20.05-01