Lei Geral de Proteção de Dados Pessoais (Brazil Privacy Act)- LGPD

The Lei Geral de Proteção de Dados Pessoais (LGPD) is Brazil’s comprehensive data protection law governing the processing of personal data by public and private entities. Effective from 2020, the LGPD establishes principles and obligations relating to the collection, use, storage, sharing, and protection of personal data. The law grants individuals rights over their personal information, regulates sensitive personal data processing, establishes legal bases for processing, governs international data transfers, and creates accountability requirements for organisations. The LGPD is Brazil’s primary privacy framework and is influenced by international data protection standards such as the EU GDPR.