The consumer finds himself compelled to surrender his identification to pay fairly.
In São Luís, Maranhão, a Brazilian judge has drawn a line between commerce and coercion, ruling that Raia Drogasil's practice of tying discounts to personal data collection strips consumers of meaningful choice. The decision recognizes what many modern data practices obscure: that economic pressure can hollow out consent just as surely as outright compulsion. For those already made vulnerable by illness and the need for medication, the ruling affirms that the right to privacy cannot be quietly sold at the pharmacy counter.
- Customers seeking medication at one of Brazil's largest pharmacy chains faced a quiet ultimatum — share your national identification number or pay more for your prescriptions.
- Two civil rights organizations challenged the arrangement, arguing that mass data collection dressed as a loyalty program exploited the vulnerability of sick consumers who could not easily afford to refuse.
- Judge Douglas de Melo Martins found that economic pressure is a form of coercion, and that a discount withheld is a penalty imposed — making any resulting 'consent' legally meaningless.
- Raia Drogasil was ordered to sever the link between discounts and data within 60 days, establish transparent consent policies across all stores, and pay R$10 million in collective moral damages.
- Brazil's data protection authority had already opened a parallel investigation and extracted corrective measures from the company, but the court's ruling goes further, condemning the underlying commercial logic itself.
A Brazilian judge has ruled that Raia Drogasil, one of the country's largest pharmacy chains, cannot make discounts conditional on customers providing their CPF — Brazil's tax identification number. The decision, issued in São Luís, Maranhão, found the practice to be economic coercion in violation of both the Consumer Protection Code and Brazil's data privacy law, the LGPD.
The case was brought by two civil rights organizations who argued the pharmacy was using the promise of savings to extract personal data at scale, then building consumer profiles for targeted advertising. The judge agreed, finding that Raia Drogasil had never obtained freely given, informed consent — and that the discount mechanism itself made genuine consent impossible. A customer purchasing medication due to illness, already in a fragile state, who must choose between surrendering personal information or paying a higher price is not making a free choice. Withholding the discount functions as an immediate financial punishment for refusing to share data.
The ruling classified the practice as both excessive advantage-taking and a form of indirect tied selling, both prohibited under Brazilian consumer law. The company was ordered to stop linking discounts to any personal data collection, implement clear and transparent consent policies at every store within 60 days, and pay R$10 million in collective moral damages. Non-compliance carries daily fines of R$100,000.
The judgment arrives alongside a separate investigation by Brazil's National Data Protection Authority, which had already required the company to offer alternatives to biometric identification and improve data transparency. That investigation was archived after the company implemented corrective measures. But the court's ruling stands as a stronger statement: no consent form can legitimize a commercial structure that makes privacy the price of a fair deal.
A Brazilian judge has ruled that Raia Drogasil, one of the country's largest pharmacy chains, cannot condition discounts on customers surrendering their personal identification numbers. The decision, handed down by Judge Douglas de Melo Martins in São Luís, Maranhão, found the practice constitutes a form of economic coercion that violates both consumer protection law and Brazil's data privacy statute.
The case centered on a straightforward but consequential business practice: Raia Drogasil offered price reductions to customers willing to provide their CPF—Brazil's tax identification number—ostensibly to enroll them in loyalty programs and send targeted marketing. Two civil rights organizations, the Center for Citizenship Promotion and Defense of Human Rights Padre Josimo and the Institute for Communication and Education in Consumer and Investor Defense, challenged the arrangement as exploitative. They argued the pharmacy was conducting mass collection of personal data under the guise of offering discounts, then using that information to build consumer profiles and direct advertising.
The judge's reasoning cut to the heart of consent and coercion. He found that Raia Drogasil had failed to demonstrate that customers had freely, knowingly, and unambiguously agreed to share their data. More fundamentally, he recognized that the discount mechanism itself undermined genuine choice. When a customer seeking medication—often in a vulnerable state due to illness—faces a choice between paying full price or surrendering personal information, the choice is not truly free. The promise of savings functions as economic pressure. Refusing to provide the CPF results in an immediate financial penalty. In the judge's words, the consumer of medicines, frequently fragile due to health concerns, finds himself compelled to hand over his identification to pay a fair price for his medication. The refusal to provide a CPF results in immediate financial punishment, which completely empties the concept of freedom in giving that data.
The ruling classified the practice as both excessive advantage-taking and indirect tied selling—both prohibited under Brazil's Consumer Protection Code. The judge ordered Raia Drogasil to cease linking discounts to the provision of any personal data. Within sixty days, the company must establish clear consent policies at every store location, explaining to customers what data is being collected, why, how long it will be kept, and whether it will be shared with third parties. Failure to comply carries a daily fine of 100,000 reais. The company was also ordered to pay 10 million reais in collective moral damages to the State Fund for Protection of Diffuse Rights in Maranhão.
The decision arrives against the backdrop of parallel enforcement action by Brazil's National Data Protection Authority, which notified Raia Drogasil in February 2025 over concerns about the collection and use of sensitive personal data for behavioral profiling and advertising targeting. The authority opened a formal administrative investigation and imposed interim measures, including requiring the pharmacy to offer alternatives to biometric identification in its Univers loyalty program and to provide clearer information about data storage and sharing. The authority's investigation concluded in 2025 with the company implementing corrective measures, and the case was archived without finding remaining violations. Yet the court's judgment stands as a separate and more forceful statement: the economic logic of the discount offer itself, regardless of what consent forms say, cannot override the fundamental right to choose whether to share personal information.
Citas Notables
The consumer of medicines, often in a vulnerable state due to health concerns, finds himself compelled to hand over his identification to pay a fair price for his medication. Refusal to provide a CPF results in immediate financial punishment, which completely empties the concept of freedom in giving that data.— Judge Douglas de Melo Martins
La Conversación del Hearth Otra perspectiva de la historia
Why does a judge care how a pharmacy offers discounts? Isn't that just business?
Because the discount isn't really optional. When you're sick and need medicine, and the pharmacy says "give me your ID number or pay more," you're not freely choosing. You're being pressured.
But customers could just pay full price and refuse, right?
Technically yes. But the judge saw that as a false choice—a financial punishment for saying no. He called it economic coercion. It's the same logic that protects workers from being forced to give up rights in exchange for a paycheck.
So the real issue is the data collection, not the discount itself?
Exactly. The pharmacy can offer discounts. But they can't use the discount as leverage to collect personal information. Those have to be separate decisions.
What changes now?
The pharmacy has to tell customers upfront what data they're collecting and why, without any financial incentive attached. Customers can get the discount without giving their CPF, or give their CPF without needing a discount. The choice becomes real.
And if they don't comply?
They pay 100,000 reais every single day until they do. Plus they already owe 10 million in damages. It's expensive enough to force genuine change.