What are you looking for?
“My mission is to co-reflect so that data and technologies become vectors of human dignity and of responsible innovation”
Bruno Bioni holds a PhD in Commercial Law and a Master’s in Civil Law from the University of São Paulo (USP) Law School. In the academic sphere, he was a study visitor at the European Data Protection Board (EDPB) and at the Council of Europe’s (CoE) Personal Data Protection Department, as well as a visiting researcher at the Law, Technology and Society Research Center of the University of Ottawa Faculty of Law. He is the author of the books “Personal Data Protection: the function and limits of consent” and “Regulation and Data Protection: the principle of accountability,” as well as editor of several books, such as “Data Protection: context, narratives, and foundational elements.” He has been part of a number of research groups, among them the USP Public Policy Group for Access to Information (GPoPAI-USP) and the Latin American Network for Surveillance, Technology and Society Studies (LAVITS). He was legal and government relations advisor to the Brazilian Internet Steering Committee (CGI.br) and to the Brazilian Network Information Center (NIC.br). He is Founding Director of Data Privacy Brasil, a space at the intersection of a course school and a research association in the area of privacy and data protection. He is Founding Partner of Bioni Consultoria, working as a lawyer and legal opinion writer. Finally, he was a member of the Federal Senate Commission of Jurists on Artificial Intelligence and is currently a member of the National Data Protection Council (CNPD), appointed as a titular member among the representatives of civil society organizations. At the end of 2023, he was appointed a member of the Study Committee on Digital Integrity and Transparency on Internet Platforms of the Superior Electoral Court (TSE), and in 2024 he will represent Data Privacy Brasil at the G20 in the Think Tank 20 (T20), a Task Force focused on Inclusive Digital Transformation, of which he became Brazil’s co-chair, alongside ORF India.
Explore our collection of featured cases, where we gather experiences, technical opinions, and research projects that illustrate effective practices and innovations
EXPLORE
Since his undergraduate studies, Bruno has been involved with topics related to law and technology. Twice, he was a scientific initiation scholar in the Law and Information Society research group at the Faculdades Metropolitanas Unidas. During this period, he also worked at two law firms at the intersection of innovation and regulation, one in the agribusiness sector and the other in the healthcare sector.
Since entering the Master’s in Civil Law at the University of São Paulo Law School, Bruno has dedicated himself exclusively to the field of data protection and privacy. His research received two grants from the São Paulo Research Foundation/FAPESP. One to support his research at the national level for two years, and another to carry it out as a visiting researcher at the Center for Technology, Law and Society of the University of Ottawa in Canada in 2014, an opportunity during which he conducted field research at the Privacy Commissioner of Canada.
This year, Bruno became part of an interdisciplinary project on privacy and surveillance of the Public Policy Research Group/GPoPAI of the School of Arts, Sciences and Humanities of the University of São Paulo, and was also awarded best monograph in the contest held by the Brazilian Institute of Consumer Policy and Law.
Leading the legal axis of a project on privacy and data protection with GPoPAI, Bruno actively took part in the public consultation process on the then draft data protection bill with the Ministry of Justice, and also collaborated as an associate researcher at InternetLab and as a consultant at the Center for Technology and Society of the Fundação Getúlio Vargas Law School in Rio de Janeiro.
Also in 2015, he was a trainee at the Council of Europe’s Data Protection Department when the modernization of Convention 108 was under discussion, and was selected for the IFIP Summer School on Privacy and Identity Management, held at the University of Edinburgh.
Closing his cycle with GPoPAI-USP, Bruno prepared a comparative guide to the three personal data protection bills under discussion in the Chamber of Deputies and the Federal Senate (Checkmate: the personal data tripod in the National Congress), and also took part in the first public hearing to inform the debates among legislators.
Also that year, Bruno began working as legal and government relations advisor to the Brazilian Network Information Center/NIC.br and the Brazilian Internet Steering Committee.
Immersing himself in the Internet governance agenda, Bruno began preparing regulatory impact analyses on bills and other regulations involving freedom of expression, civil liability of intermediaries, disinformation, data caps, encryption, application blocking, data protection and privacy, among other topics that were part of the Internet regulation agenda in the 2016-2019 triennium.
One of the activities carried out was a mapping of all Internet-related bills in the National Congress, which drew the attention of the specialized media (e.g., Estadão e Jota). Finally, also in 2017, he received the title of Ambassador “Brazil, a digital country” from the Brazilian Software Association/ABES for his work in developing a competitive business and innovation environment in 2017
Em 2018, funda o Data Privacy Brasil, um think-tank com o objetivo de promover a produção de conhecimento, conscientização e educação sobre privacidade e proteção de dados pessoais. 2018: In 2018, he founded Data Privacy Brasil, a think tank aimed at promoting knowledge production, awareness, and education on privacy and personal data protection.
Em sua capacidade acadêmica, Bruno participou ativamente das discussões e processo de aprovação da Lei Geral de Proteção de Dados Pessoais (Lei No 13.709/2018). Além de ter participado de audiências públicas e seminários sobre o tema na Câmara dos Deputados e de sessão temática no Senado Federal, sua contribuição é nominalmente mencionada nos relatórios de aprovação da lei. In his academic capacity, Bruno actively participated in the discussions and approval process of the General Personal Data Protection Law (Law No. 13,709/2018). In addition to taking part in public hearings and seminars on the subject in the Chamber of Deputies and in a thematic session in the Federal Senate, his contribution is expressly mentioned in the law’s approval reports.
Closing his three-year cycle at NIC.br and CGI.br, Bruno began working as an independent consultant (Bioni Consultoria) and academic-scientific coordinator of Data Privacy Brasil. Throughout the first semester, he took part in public hearings on the subject, such as, for example, in the National Congress Joint Committee on Provisional Measure 869/2018. In the same period, his book “Personal Data Protection: the function and limits of consent” reached its third print run in only (six) months since publication. He also took part in the European Data Protection Board/EDPB trainee program.
Bioni completed his PhD and was appointed a member of the National Data Protection Council – CNPD, as a titular member among the representatives of civil society organizations. In addition, in 2022, he was appointed to the Federal Senate Commission of Jurists on Artificial Intelligence and launched two books: “Data Protection: Context, Narratives, and Foundational Elements,” as editor and co-author, and “Regulation and Data Protection: the Principle of Accountability,” as author.
In May 2023, he was appointed a member of the Data Protection Commission (CPD/CN) of the CNJ, responsible for proposing, on its own initiative, guidelines with criteria on the application, interpretation, and adaptation of extrajudicial registry offices (serventias extrajudiciais) to the General Personal Data Protection Law. In December of the same year, he was nominated to join the Study Committee on Digital Integrity and Transparency on Internet Platforms of the Superior Electoral Court (TSE), established by Ordinance No. 997.
In 2024, he will represent Data Privacy Brasil at the G20 through his participation in the Think Tank 20 (T20), a Task Force focused on Inclusive Digital Transformation, of which he became Brazil’s co-chair, alongside ORF India.
Previously addressed in the codes within the scope of construction, discussed and approved by the then Ministry of Justice, it became law in August 2018. Brazilian law known by the acronym LGPD, This communication is essential, as well as the space for technological innovation in recent years, as well as a series of parameters for the organization of rights itself. After an understanding between innovation and regulation, a series [of firms], one in the agribusiness sector and the other in the healthcare sector.
Founder and Professor of Data Privacy Brasil, an organization focused on the training and capacity building of professionals in personal data protection. Since the beginning of 2018, Data Privacy Brasil has trained more than 700 (seven hundred) people through open short courses and in-company training.
He is a member of the Latin American network for surveillance, technology and society studies/LAVITS and is currently a fellow of the Data Protection and Cybersecurity in the BRICS project of the Fundação Getúlio Vargas Law School.
He received the title of Ambassador “Brazil, a digital country” from the Brazilian Software Association/ABES for his work in developing a competitive business and innovation environment in 2017, and also the best monograph award from the Brazilian Institute of Consumer Defense Policy/Brasilcon in 2014.
He is a Columnist for the JOTA Portal on privacy and personal data protection and for the International Association of Privacy Professionals – IAPP, the largest association of privacy professionals in the world, with more than 35 thousand members spread across all continents. In addition, he is the author of essays and opinion pieces published in the most important media outlets, such as the newspaper Valor Econômico.
He is a Visiting Professor of Digital Law at several Brazilian universities, such as the Ribeirão Preto Law School of the University of São Paulo/USP.
He is the author of the book “Personal Data Protection: the function and limits of consent,” in addition to scientific articles published in national and international scientific journals. The book has received some reviews, such as the one written by Miriam Wimmer under the title “Personal data: rethinking consent” for the legal portal JOTA.
Looking for a specialist in data protection, privacy, and digital governance? For specialized consulting and legal opinions, get in touch.
