André da Rocha Ferreira

André da Rocha Ferreira

Professional experience

André da Rocha Ferreira’s professional focus lies within the realms of compliance and corporate criminal law, wherein he possesses extensive expertise. Furthermore, his practice is distinguished by its multidisciplinary approach, particularly emphasizing the intersections between law and technology, notably encompassing criminal law, compliance, and regulatory affairs.

He boasts significant experience in conducting investigations and prosecuting cases pertaining to corporate criminal law and enforcement, compliance, data protection, and regulatory compliance.

Mr. Ferreira is actively engaged in product compliance and technical standards, including his involvement in audits as an observer and his proficiency in certifications. He served as a representative before regulatory bodies such as Inmetro and Anatel, notably in Regulatory Impact Analyses (RIA), as well as in matters concerning cybersecurity and electric mobility.

Moreover, he is adept at drafting Compliance Policies and providing legal opinions. He contributes to academia as a lecturer and has authored numerous articles and book chapters.



• Basic Concepts of Cybersecurity: Theory and Practice – PUC-Campinas (2023);
• Essential Elements of Regulatory Impact Assessment (RIA) – Inmetro (2022)
• E-mobility: Policy, Planning, and Opportunities. Unicamp (2022).
• Information Security Foundation based on ISO/IEC 27001 – TIExames/EXIN (2021)
• Course in Privacy and Data Protection – Data Privacy Brasil Institute (2021)
• Internal investigations. Instituto Brasileiro de Ciências Criminais – IBCCRIM (2020).
• Master’s Degree on Criminology And Criminal Law Pontifical Catholic University of Rio Grande do Sul (PUCRS) – 2017
• Bachelor of Laws from the Federal University of Rio Grande do Sul (UFRGS) – 2016.
• Undergraduate exchange program at the Girona University (Spain) – 2013



Professor. Curso de Especialização. Mobilidade Elétrica. PUCRS (2024)
FERREIRA, A. R; SCALCON, R. L. O problema da quebra coletiva de sigilo de dados pessoais contra pessoas indeterminadas. Publicado no boletim do IBCCRIM (setembro de 2023).
FERREIRA, A. R. O desafio de um Marco Geral da Mobilidade Elétrica no Brasil. Publicado em Estadão (outubro de 2022). Disponivel em:
FERREIRA, A. R. Tratamento de dados pessoais em investigações criminais: o direito à autodeterminação informativa como limite constitucional. Publicado em: Revista Brasileira de Ciências Criminais. Ano 29, v. 185, nov. 2021. Editora Revista dos Tribunais – Thomson Reuters.
FERREIRA, A. R. A ameaça de ransomware e os caminhos para enfrentá-la (2021). Disponível em:


I'm a subscriber
I'm a subscriber