To be honest, that information is already out there, people can track you by your full name already. The tech analogy is: CPF is just the primary key id in the Brazilian PERSON database, everyone gets one, and you use it on any API a person is needed (literally and figuratively). It should be public by design, just like a piblic crypto key, or a username handle