Lei Geral de Proteção de Dados Pessoais (LGPD)
This regulation unifies the processing of personal data, establishing a robust framework inspired by the EU GDPR. It defines essential principles, rights of data subjects, obligations of data processors, and the role of the National Data Protection Authority (ANPD) as the entity responsible for compliance and sanctions.
In force and fully applicable since 2020, with a sanctioning regime active since 2021
Access, rectification, portability, deletion, and sharing of data.
Article 14
Establishes reinforced protection for girls, boys and adolescents:
Data processing only in your best interest.
Requires informed and verifiable parental consent.
Prohibits conditioning access to games or apps on the provision of unnecessary data.
Clear and accessible information for parents and children.
The ANPD, linked to the Ministry of Justice, applies sanctions such as warnings, fines (up to 2% of total revenue, a maximum of R$50 million per violation), blocking, and deletion of data, among others.
It is the key framework for digital protection and privacy in Brazil, with a focus on transparency, citizen oversight, and accountability.
Its extraterritorial scope requires companies outside Brazil that process personal data within the country to comply with its provisions.
Lei Geral de Proteção de Dados Pessoais (LGPD)
This regulation unifies the processing of personal data, establishing a robust framework inspired by the EU GDPR. It defines essential principles, rights of data subjects, obligations of data processors, and the role of the National Data Protection Authority (ANPD) as the entity responsible for compliance and sanctions.
In force and fully applicable since 2020, with a sanctioning regime active since 2021
Access, rectification, portability, deletion, and sharing of data.
Article 14
Establishes reinforced protection for girls, boys and adolescents:
Data processing only in your best interest.
Requires informed and verifiable parental consent.
Prohibits conditioning access to games or apps on the provision of unnecessary data.
Clear and accessible information for parents and children.
The ANPD, linked to the Ministry of Justice, applies sanctions such as warnings, fines (up to 2% of total revenue, a maximum of R$50 million per violation), blocking, and deletion of data, among others.
It is the key framework for digital protection and privacy in Brazil, with a focus on transparency, citizen oversight, and accountability.
Its extraterritorial scope requires companies outside Brazil that process personal data within the country to comply with its provisions.