A recent audit conducted by the Federal Court of Auditors (TCU) found that the Federal Supreme Court (STF) holds the highest position within the Judiciary regarding implementation of the General Data Protection Law (LGPD).
The study evaluated 387 federal agencies and entities, spanning various branches of government, through questionnaires covering nine key aspects: planning, organizational context, training, leadership, data processing compliance, ensuring data subject rights, sharing practices, incident response, and security measures.
In the Judiciary, of the 67 institutions analyzed, 14 achieved the highest level of maturity regarding the LGPD. The STF achieved the highest score, classified as “improved,” with 88.09%. Next in line were the Regional Electoral Court of Espírito Santo (TRE-ES), with 84.9%, and the Superior Court of Justice (STJ), with 79.76%.
According to Teresa Melo, Secretary of Public Relations, the STF’s result could have been even more impressive had it not been for the fact that the audit took place before all ongoing measures were completed. “Even so, the priority given to this issue by senior management resulted in a score of 88, placing us at the improved level,” she highlighted.
For Luísa Lacerda, special advisor to the Presidency and coordinator of the STF’s compliance with the LGPD, the performance reflects the institutional commitment under the leadership of Justice Luís Roberto Barroso. “More than meeting a regulatory requirement, we seek to consolidate a culture of data protection. This means ensuring that all personal information is treated ethically, securely, and transparently.”
The survey highlights that, although some courts are already at an advanced stage, full compliance with the LGPD must be seen as a commitment by all public agencies, at any level or branch. Data protection is not limited to legal compliance
but constitutes an essential element of governance, transparency, and social trust.
Flávia de Aguiar Pietri Vicente | flavia.vicente@nascimentomourao.adv.br
Partner in the Corporate Advisory Law practice, specializing in Digital Law and Data Protection.
