🇧🇷
Brazil
Lei Geral de Proteção de Dados (LGPD)
Americas🟢 Comprehensive
Compliance Score
79%
11 Addressed
3 Partial
0 None
Authority
Autoridade Nacional de Proteção de Dados (ANPD)
Overview
Brazil's LGPD, effective September 2020, is Latin America's most comprehensive data protection law. Modeled on GDPR, it establishes a National Data Protection Authority (ANPD) and provides extensive rights to data subjects.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
AddressedChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
AddressedAI & Automated Decisions
PartialData Localisation
PartialSignificant Data Fiduciary
AddressedGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Brazil?+
Brazil is governed by the Lei Geral de Proteção de Dados (LGPD). The law is enforced by the Autoridade Nacional de Proteção de Dados (ANPD). According to our analysis, the country has a Comprehensive level of data protection framework.
Does Brazil require a Data Protection Officer (DPO)?+
Yes, under the Lei Geral de Proteção de Dados (LGPD), organizations are generally required to appoint a Data Protection Officer (DPO) or a similar privacy officer to ensure compliance.
What are the data localisation rules in Brazil?+
Partially. While Lei Geral de Proteção de Dados (LGPD) may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Brazil?+
Under the Lei Geral de Proteção de Dados (LGPD), organizations must notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected individuals without undue delay in the event of a personal data breach.