Data in the public security area and the provision of services to society will be at risk if Celepar (Paraná’s Information and Communication Technology Company) is privatized without the State Secretariat for Public Security (Sesp) developing an adequate storage structure. This is the conclusion of the 6th External Control Inspectorate (6th ICE) of the Paraná State Court of Accounts (TCE-PR) after analyzing the documentation sent by the government of Ratinho Jr (PSD) regarding the sale of the company.
Based on the documentation, the 6th ICE proposed a representation for the court to suspend Sesp’s technology procurements aimed at data processing or storage. The transfer and isolation of security data is essential for the privatization of Celepar, which is suspended by order of Justice Flávio Dino of the Federal Supreme Court (STF).
In the representation, the 6th ICE cites risks such as increased vulnerability of databases and interruption of public services. See the risks pointed out by the Inspectorate:
- Risk of interruption or degradation of critical public services, especially those dependent on systems and information bases used in public security operational activities;
- Heightened vulnerability of sensitive databases, due to the absence of evidence of formal access controls, structured information protection mechanisms, or institutional contingency plans;
- Reduced administrative efficiency and increased decisional unpredictability, resulting from the adoption of technological or administrative solutions without the corresponding formalization of institutional mechanisms for administrative coordination and control;
- Exposure of the Public Administration to legal and institutional risks, especially in situations involving potential unavailability, leakage, or improper handling of sensitive data.
José Marcos Lopes
The 6th ICE technicians stated that no “formal institutional instruments capable of demonstrating the existence of a responsible administrative structure applicable to the handling of information bases linked to public security activities” were identified, nor any “consolidated institutional policies, definition of administrative responsibilities, structured risk management mechanisms, or operational procedures specifically aimed at protecting and handling these sensitive databases.”
The Inspectorate concluded that there is no “administrative act or technical document that clearly and verifiably demonstrates the officially adopted technological solution for hosting public security information bases” and emphasized that, in the security area, “data are not mere records; they are instruments of state power, linked to investigation, repression, protection of public order, and institutional safeguarding.”
See the representation below, which will have Councilor Durval Amaral as rapporteur — who also reports on the cases concerning the privatization of Celepar at the Court.
Race to transfer the data
Ratinho Jr’s government began, in the first half of 2025, a race to isolate data from the public security area, which had been stalling the sale of Celepar. The General Data Protection Law (LGPD) does not allow this information to be managed by private companies.
Sesp hired Indra Brasil Soluções e Serviços Tecnológicos, the Brazilian arm of Spain’s Indra, for R$ 162.4 million, which was denounced by the opposition to Ratinho Jr as an attempt to create a “fake data center” within the secretariat. The Public Prosecutor’s Office of Paraná (MPPR) opened an investigation to look into possible irregularities in the contracting.
In January of this year, the government informed the Paraná Court of Justice (TJPR) that it had terminated the contract with Indra and was preparing to contract Serpro’s cloud service, the federal state-owned information technology company, which would house public security data. Serpro denied the contracting.
Case at the STF and proceedings at the TCE
Scheduled for the 17th of this month, the auction to privatize Celepar was suspended on February 22 by STF Justice Flávio Dino. He is the rapporteur of the Direct Action of Unconstitutionality filed by PT and PSOL against the law that authorized the sale of the company, approved in November 2024. On the 6th, Justice Cristiano Zanin requested a view and postponed the plenary’s decision on Flávio Dino’s injunction.
The TCE-PR has not yet concluded the proceedings on Celepar’s divestment. In January, Durval Amaral revoked the injunction by substitute councilor Livio Sotero Costa, who had suspended the process in September. On Wednesday (11), councilor Augustinho Zucchi requested a view and will have 30 days to present his vote.
