América Móvil—Brazil's ANPD opened sanction process against América Móvil's Claro for sharing 100+ customer data points with Serasa without consent
Brazil's National Data Protection Authority (ANPD) announced on June 8, 2026 that it opened an administrative sanction process against Claro (América Móvil's Brazilian mobile, broadband, and pay-TV unit) for sharing more than 100 data points per customer -- including ZIP codes, complaint volumes, pay-per-view consumption, and mobile data usage -- with credit bureau Serasa Experian under a 2021-2023 partnership, without consulting affected customers. ANPD's Superintendent of Inspection said the sharing exceeded what was necessary and lacked transparency, and customers had difficulty reaching Claro's data protection officer. Claro said the data were used only for internal studies and not incorporated into market solutions, and that the partnership, authorized by antitrust regulator CADE, ended in 2023. The process could result in fines of up to R$50 million per violation or 2% of revenue under Brazil's LGPD.
Scoring Impact
| Topic | Direction | Relevance | Contribution |
|---|---|---|---|
| Data Security | -against | secondary | -0.50 |
| User Privacy | -against | primary | -1.00 |
| Overall incident score = | -0.248 | ||
Score = avg(topic contributions) × significance (medium ×1) × confidence (0.66)× agency (negligent ×0.5)
Evidence (2 signals)
Folha de S.Paulo: Agency investigates irregularities in Claro's data sharing with Serasa
Folha de S.Paulo reported ANPD's investigation into Claro's 2021-2023 data-sharing partnership with Serasa, noting Claro's defense that the data were used only for internal studies and were not incorporated into commercial products.
ANPD official notice: Agency opens process to sanction Claro for irregularities in sharing customer data with Serasa
Brazil's data protection authority ANPD published an official notice stating it opened an administrative sanction process against Claro for irregularities in sharing customers' personal data with credit bureau Serasa, citing excessive data sharing and lack of transparency toward data subjects.