Felipe Palhares

Felipe advises clients from various jurisdictions in designing, carrying out, and reviewing privacy programs, assists companies on data privacy matters during the development of new products and services, and provides support in the response to security incidents and cyberattacks.

Felipe also has extensive experience in strategic litigation, both judicial and administrative, acting for clients from a wide variety of sectors, such as technology, payment means, infrastructure, airlines, gaming and entertainment. He also works in M&A transactions and capital markets offerings, conducting due diligence related to technology and data privacy matter.

Felipe is the only person in the world to have earned all current certifications and designations issued by the International Association of Privacy Professionals (IAPP), including the CIPP/A, CIPP/C, CIPP/E, CIPP/US, CIPM, CIPT, CDPO/BR, CDPO/FR, FIP and PLS.

Among some of the relevant cases in which he worked are:

- Represented publicly listed companies in the crisis management due to ransomware attacks, participating in discussions during the forensics investigation, managing the communications with regulators and business partners, and representing the clients in administrative and judicial proceedings.

- Represented a payment institutions regulated by the Brazilian Central Bank in a civil proceeding launched by the Public Prosecutor's Office related to a security incident involving personal data.

- Represented one of the leading video game company in the world in several lawsuits filed against it due to personal data processing activities carried out by one of its most popular games.

- Assisted a health company in the assessment of a cyber incident, and mapping appropriate measures to mitigate such risks.

- Assisted one of the largest platforms of online content in Brazil in its compliance with the Brazilian General Data Protection Law and in the structuring of an intragroup international data transfer agreement for the entities of its economic group.

- Assisted a company from the aviation sector, world leader in air transport communications, in the conduction of its privacy program to comply with the Brazilian General Data Protection Law and in reviewing its internal policies and procedures related to processing personal data.

- Assisted several national and international companies in their compliance with the Brazilian General Data Protection Law, from carrying out data mapping exercises to structuring complete privacy programs.

- Assisted a startup from the health sector in assessing the risks from a data protection standpoint on the recording and sharing of personal data from patients that uses its telemedicine services.

He is also certified as a Data Protection Officer by Maastrich University, in the Netherlands, and as a Data Privacy Solutions Engineer by ISACA.

Felipe is a guest lecturer on data privacy at INSPER, FGV/Rio, Damásio and other educational institutions.

He worked during an exchange period at the UK law firms Eversheds Sutherland and Bristows.