INFORMATION SECURITY AND
PRIVACY POLICY
1. Purpose
This Policy establishes guidelines for protecting and safely managing information belonging to Carreiro, Calli & Oliveira Sociedade de Advogados, its clients, and the general public, and further determines the responsibilities of employees, third parties, and service providers.
2. Concepts
2.1 Information
The office’s strategic asset, which must be protected against risks of loss, fraud, or damage. It includes digital, print, verbal, and mobile media.
2.2 Basic guidelines
Confidentiality: Access restricted to authorized persons.
Availability: Guaranteed access to authorized users, as needed.
Integrity: Protection of information against undue changes.
3. Applicability
This policy applies to all temporary or permanent employees, third parties, and service providers having access to office information from any location or device used. Contracted third parties must demonstrate that they have a policy compatible with ours.
4. Commitments of the law firm
Protect electronically and physically stored data, which will not be commercialized and may only be shared with prior authorization. We stress that the services provided require the support of a technological infrastructure that may be established outside of Brazil, such as cloud servers and services, which may be owned or provided by third parties, in which your personal data is stored. Only commercial partners and suppliers that meet compatible security standards will be contracted for this purpose.
Comply with legal and contractual obligations.
Preserve intellectual property rights.
Develop and test information security plans.
Prohibit unauthorized use of information.
Communicate the policy and conduct periodic reviews of its security and personal data protection systems.
Investigate and handle security incidents, reporting them to the appropriate authorities when necessary.
5. Risk assessment and information classification
Identify and protect Personal Data in accordance with requirements of the General Data Protection Law (LGPD) – Law No. 13,709/2018, especially sensitive data.
For more information on the storage of your personal data, please get in touch with Rodrigo Oliveira Silva at rodrigo@carreiro.adv.br.
6. Roles and Responsibilities
6.1 Carreiro, Calli & Oliveira Sociedade de Advogados
Propose and review the safety-related standards
Ensure the resources necessary for information security.
Promote a safety culture.
Investigate incidents and decide on sanctions.
6.2 Users
Resources and systems are the property of the office and may be monitored for information security.
Information must be used only for authorized purposes and safely.
Illegal or abusive use of office, client, employee, and partner data is prohibited.
Access to information is restricted with proper controls, which are revoked immediately upon expiration of contracts.
Personal devices used for access must be properly protected.
Information storage should only occur for the time necessary to perform the service and comply with legal standards.
Exclusive use of corporate systems for professional activities.
Installing and using unauthorized software or software that violates copyright is prohibited.
7. Final Provisions
This policy is part of employment contracts and may be monitored without prior notice.
All content on this website, including texts, images, and brands, is protected by copyright and owned by or licensed to Carreiro, Calli & Oliveira Sociedade de Advogados, and any reproduction, copying, or dissemination without prior and express authorization is prohibited.
