Feira City Hall says it is awaiting notification from the ANPD after punishment for leaking medical data

The City Hall of Feira de Santana, the second largest city in Bahia, reported that it is awaiting official communication about the decision of the National Data Protection Authority (ANPD), which punished the municipality for disclosing the medical data of 1,241 people in the Official Gazette, in September 2025.

In a statement, the Municipal Attorney General's Office stated that, since becoming aware of the case, the municipal administration has taken steps to investigate what happened and improve security and personal data protection procedures.

According to the city hall, after receiving formal communication of the decision, the Prosecutor's Office will analyze the terms of the determination and evaluate the appropriate administrative and legal measures, including the established deadlines.

The municipality also reaffirmed its commitment to complying with legislation and protecting personal data.

The ANPD concluded that the city hall committed six violations of the General Personal Data Protection Law (LGPD). Among the irregularities identified are the public exposure of information that should be protected, the lack of adequate security measures and the lack of communication of the incident to the agency and the people affected.

As sanctions, the city hall received a warning and was forced to publish a notice about the infraction on the front page of the institutional website for six months. The municipality must also adopt corrective measures to prevent new leaks.

The case occurred on September 20, 2025, when the city hall published a list with names of people who would have the benefit of the Free Pass on public transport suspended by court order. The document also exposed health information, including diagnoses of HIV, sickle cell anemia and fibromyalgia.

At the time, the Municipal Department of Urban Mobility (Semob) reported that the disclosure occurred due to a system failure. The edition of the Official Gazette was taken offline on the same day, and the city hall reported that it had opened an internal investigation to investigate the case.