One of the possibilities for covering potential fines to be applied by the National Data Protection Authority (ANPD) to personal data controllers is to take out cyber insurance or civil liability insurance, with a view to potential cyber risks.
Due to the increased threat of cyberattacks, opting for insurance is a good way to avoid paralyzing your company’s cash flow due to potential information security incidents.
To purchase insurance and determine the value, the insurer will assess the company’s compliance with the LGPD and the best practices it adopts, and may deny insurance to companies that do not implement a data privacy culture.