Agência Pará
pa.gov.br
Ferramenta de pesquisa
ÁREA DE GOVERNO
TAGS
REGIÕES
CONTEÚDO
PERÍODO
De
A

State Decharacterizes CPFs in DAEs

Measure complies with the General Data Protection Law

By Ana Márcia Pantoja (SEFA)
24/10/2025 11h53

The Secretary of Finance of Pará (Sefa) started, in October, the procedure for decharacterizing CPFs in the issuance of State Collection Documents (DAEs) for the Tax on Motor Vehicle Property (IPVA) and the Tax on Transmission Cause Mortis and Donations (ITCD). “Now, when a person issues the DAE for IPVA or ITCD, their CPF number appears incomplete. This complies with personal data protection regulations,” informs the Secretary of Finance, René Sousa Júnior.

The measure complies with Normative Instruction (IN) number 19/09, which establishes guidelines for the implementation and compliance with Federal Law No. 13,709, the General Data Protection Law (LGPD), and Normative Instruction 20/2025, which provides for the standardization of the disclosure and treatment of personal data within Sefa. Other documents published by the Tax Authority in the Official Gazette will also have CPFs decharacterized, such as notifications to taxpayers.

The Secretary will stop publishing the complete number of the Cadastro de Pessoas Físicas (CPF), except when expressly required by specific legal norms. “For the purposes of depersonalization, partial concealment of the CPF must be adopted,” says IN 19/25 from Sefa. The methodology used consists of concealing the first three and the last two digits of the CPFs.

The disclosure of personal data in public documents and administrative acts, according to the LGPD, observes the principles of necessity: publication only of data strictly necessary for the purpose of the information; minimization: restriction of the quantity and extent of personal data published; security: adoption of measures that prevent undue exposure of personal data; transparency: guarantee of access to public information, without compromising the privacy of data subjects.

The General Data Protection Law came into effect in Brazil in 2020. The article that addresses the depersonalization of personal data in publications is Art. 7, § 4.