São Paulo's municipal administration is sitting on a digital time bomb. Thousands of duplicate image files — ranging from official urban planning photographs to cultural heritage records — have accumulated across the city government's decentralised databases, creating compliance headaches, storage costs and, in at least one documented case involving the Secretaria Municipal de Cultura, conflicting versions of the same historic document appearing simultaneously in public tender processes.
The problem crystallised this year as the Nunes administration pushed to consolidate city data onto a unified platform under the Programa São Paulo Inteligente, a smart-city initiative tied to federal broadband expansion funds. Migrating legacy records exposed what IT managers had long suspected: municipal systems built by different contractors over the past decade had no shared protocol for image deduplication, meaning the same photograph could exist under dozens of different filenames across dozens of different servers.
Why This Matters Right Now
The timing is awkward. Brazil's Lei Geral de Proteção de Dados — the LGPD — requires public bodies to maintain accurate, non-redundant personal data records. Duplicate images that contain identifiable faces, vehicle plates or biometric information collected during city operations are not just an IT nuisance; they are a potential regulatory liability. The Autoridade Nacional de Proteção de Dados, based in Brasília, has signalled it will begin municipal audits in the second half of 2026, with São Paulo among the priority targets given the city's scale.
Storage costs alone are measurable. Municipal data centre contracts reviewed by The Daily São Paulo show the city spent R$ 47 million on cloud and on-premises storage in 2025, a figure that internal technical assessments suggest could fall by as much as 15 percent if deduplication were applied systematically — savings that city budget officers have not yet formally booked.
The cultural sector has felt the friction most acutely. The Centro Cultural São Paulo, on Rua Vergueiro in Liberdade, maintains a photographic archive of more than 400,000 images. Staff there have been manually flagging duplicates for two years, a task that consumes roughly three full-time equivalent positions each month, according to internal workflow documents seen by this newspaper. The Pinacoteca do Estado, near Luz station, faces a parallel problem with its digital acquisition catalogue, where duplicate entries have delayed at least two international loan agreements.
The Decisions That Cannot Wait
Three choices will define what happens next. First, the city must decide whether to build a deduplication engine in-house — using the technical team housed at Prodam, the municipal technology company on Avenida São João — or contract a third-party solution through a public tender. Prodam engineers have reportedly prototyped a hash-based matching tool, but a formal tender would take a minimum of six months under Lei 14.133, the federal procurement law that replaced the old Lei 8.666 in 2021.
Second, administrators must settle the governance question: which secretariat owns the deduplication standard? The Secretaria Municipal de Gestão and the Secretaria de Inovação e Tecnologia have overlapping mandates, and without a clear lead agency, individual departments will continue managing their archives in isolation. A joint resolution was reportedly drafted in May but had not been signed as of this week.
Third, and most politically charged, is the question of what to do with images that cannot be automatically matched — photographs taken during protests on Avenida Paulista, for instance, where multiple camera angles of the same event exist in police, municipal transit and culture ministry archives simultaneously. Deciding which version is canonical, and deleting the rest, carries civil liberties implications that lawyers at the Defensoria Pública do Estado de São Paulo have already flagged in a formal consultation request submitted in June 2026.
City hall has until the end of the third quarter to respond to that consultation. The LGPD audit window opens in August. For municipal departments still running parallel image libraries, the window to act before external scrutiny arrives is narrowing fast.