Privacy and protection of personal data

MRS is committed to protecting the fundamental rights of freedom and privacy of its stakeholders through a Privacy Program. Through it, the Company manages issues of privacy and protection of personal data, promoting the fundamentals and principles included in the General Data Protection Law (LGPD – acronym in Portuguese). The Program is supported by instruments such as the Code of Ethics and Conduct and the support of the entire management staff. A Personal Data Processing Officer is responsible for monitoring compliance and managing risks to privacy and protection of personal data and plays a cross-divisional role in the Company.

During 2022, MRS proceeded with the project started in the previous period, completing the building of the foundation concerning the LGPD. Among the main initiatives implemented are: mapping of existing personal data activities in the Company; survey of existing agreements in which there was the need to include LGPD clauses; construction of a hotsite on the intranet with information and news on the subject; establishment of a Privacy Management System, concomitantly with the hiring of a privacy office as a partner; and the execution of several awareness trainings, focused mainly on general managers and a group of ambassadors defined by the Company as responsible for helping to disseminate the culture among other employees.

At the same time, with HR support, an effort was made to review all activities aimed at improving processes based on the validation of data that are really necessary for the area, with a focus on reducing the amount of data requested and blocking sharing of personal data between areas or with external audiences. In 2023, the review of activities, with the same purpose, will be expanded to other areas of the Company.

Also next year, MRS will revisit the Privacy and Data Protection Program to promote the necessary improvements after building the initial bases and define a medium-term plan for the area evolution. Other improvements to be implemented soon is the availability of a portal for the holders of personal data to make their requests and be answered with more agility. So far, MRS receives these requests via email.