Brazil
The most favorable LATAM jurisdiction: the TST establishes zero privacy expectation in corporate email and compliance is mandatory for companies with over 100 employees.
Important notice
vario is a technical detection and monitoring tool. The information in this section is for informational purposes only and does not constitute legal advice, nor does it replace the judgment of a qualified attorney. vario does not provide legal representation services or issue legal opinions. Before implementing any monitoring program, consult a lawyer specializing in labor law and data protection in your jurisdiction.
Antitrust
Why is communications monitoring a valid antitrust compliance tool in Brazil?
CADE explicitly requires "detection and reporting mechanisms" in its compliance guidelines (2017). The Anti-Corruption Law (Lei 12.846/2013) also requires "internal audit mechanisms" — vario directly satisfies both requirements.
Is antitrust compliance mandatory in Brazil?
Yes, for companies with more than 100 employees. Lei 12.846/2013 makes the integrity program mandatory, and Lei 13.506/2017 recognizes antitrust compliance as a mitigating factor for fines. In Brazil, non-compliance is not just a regulatory risk — it is a direct legal obligation.
What conduct does vario detect and why is it illegal under CADE?
vario detects signals of cartel formation (price fixing), bid manipulation (bid rigging), and other anticompetitive agreements under the Competition Defense Law (Lei 12.529/2011). CADE documents growing use of digital evidence — emails and chats — in its investigations.
What benefits does a compliance program provide before CADE?
Companies with structured compliance programs can access leniency agreements if they detect and report anticompetitive conduct internally before CADE investigates, significantly reduce fines, and obtain better terms in process termination agreements.
Privacy & data protection
Is it legal for an employer to monitor corporate email in Brazil?
Yes. The Tribunal Superior do Trabalho (TST) has established in multiple rulings that corporate email is a "work tool" and that employees have no privacy expectation in its contents. Brazil is the most favorable LATAM jurisdiction in this respect.
Does corporate email have the same protection as personal email?
No — the distinction is strict in Brazil. The TST recognizes monitoring of corporate email (@company.com) as legitimate, while access to personal email (Gmail, Hotmail, etc.) requires a court order. vario operates exclusively on institutional accounts.
What conditions must a company meet to deploy vario in Brazil?
The company must document the legal basis under the LGPD — legitimate interest (Art. 7, IX) is most appropriate for antitrust compliance, accompanied by a Legitimacy Test. It must also notify employees via a LGPD-compliant privacy notice and conduct a mandatory DPIA (Relatório de Impacto à Proteção de Dados) for high-risk processing activities.
Which data protection authority applies in Brazil?
The ANPD (Autoridade Nacional de Proteção de Dados), created by the LGPD (Lei 13.709/2018). The ANPD published guidance in February 2024 on the use of legitimate interest, including the balancing test requirements that companies must document when deploying vario.
Can monitoring constitute moral harassment in Brazil?
Only if it is excessive, persecutory, or selective. vario does not constitute moral harassment by design: processing is automated and impersonal — it detects signals by content, not by individual — and has a specific legitimate purpose. These are the same criteria that distinguish legitimate monitoring from harassment under TRT case law.
Start protecting your communications
Tell us about your organization and a member of the vario team will show you how it works.
Talk to the teamNo commitment · The vario team will get back to you soon