The shared use of personal data by public authorities shall fulfill the specific purposes of execution of public policies and legal attributions by agencies and public entities, subject to the principles of personal data protection listed in Art. 6 of this Law.
§1 It is forbidden for public authorities to transfer to private entities personal data contained in databases to which they have access, except:
I – in cases of decentralized execution of public activity that requires transfer, exclusively for this specific and distinct purpose, subject to the provisions of Law No. 12,527, of November 18, 2011 (the “Brazilian Access to Information Law”);
II – (vetoed); and
II – in cases in which the data are publicly accessible, subject to the provisions of this Law.
§2 Contracts and agreements as mentioned in §1 of this article shall be communicated to the national authority.