# Automated LGPD Compliance Software by CookieYes > For the complete site index, see [llms.txt](/llms.txt). Every page is also available as Markdown: replace the trailing slash with `.md` (`/pricing/` becomes `/pricing.md`), or send `Accept: text/markdown` to the page URL itself. > Is your business LGPD compliant? Prepare for compliance and mitigate any future legal risks for your business. **Source:** https://www.cookieyes.com/brazil-lgpd-compliance/ --- # The LGPD compliance software to future-proof your business Automate consent management and align your business with regulatory compliance with our easy-to-use cookie consent solution. [Become LGPD Compliant](https://app.cookieyes.com/trial?plan=pro-monthly&ref=lp_LGPD_hero) 14-day free trial Cancel anytime ![The LGPD compliance software to future-proof your business](https://assets.cookieyes.com/lgpd_hero_34a0f0151f.svg) ## The #1 cookie consent solution, trusted by 1.5 Million+ websites ![Decathlon](https://assets.cookieyes.com/decathlon_a23456d440.svg) ![KFC](https://assets.cookieyes.com/kfc_73dc90db22.svg) ![Dominos](https://assets.cookieyes.com/dominos_9ce9dc7569.svg) ![Heineken](https://assets.cookieyes.com/heineken_f0fca7d239.svg) ![Forbes](https://assets.cookieyes.com/forbes_b76200d4a5.svg) ![Toyota](https://assets.cookieyes.com/toyota_71a8106b6a.svg) ![Renault](https://assets.cookieyes.com/renault_d254f28337.svg) ## Check your LGPD Compliance CookieYes will scan your website and keep you informed on the personal data your website collects through cookies. ![Cookie Scanner](https://assets.cookieyes.com/cookie_scanner_img_dbb23c8c7a.svg) ![LGPD compliance overview](https://assets.cookieyes.com/lgpd_launch_83dc35b632.svg) The Lei Geral de Proteção de Dados (LGPD) is Brazil’s first data privacy law that establishes a framework for regulating the use and processing of personal data and provides rights to data subjects over their personal data. It imposes data protection obligations on businesses that process the personal data of Brazil’s residents. ## LGPD Compliance Checklist for Websites - Obtain user consent for cookies and trackers - Maintain a record of all user consent - Include an accurate, up-to-date privacy policy - Limit data collection only for legitimate purposes - Implement privacy by design and default - Notify data breaches to DPAs and users ## Comply with LGPD using CookieYes ### Display cookie consent banner for visitors The LGPD requires businesses to process personal data (including data collected through cookies) with free, informed and unambiguous consent that can be withdrawn easily. With CookieYes you can - Scan your website against a 100,000+ cookie database - Display a custom cookie banner that fits your brand - Show a consent revisit widget for users to withdraw consent ![Display cookie consent banner for visitors](https://assets.cookieyes.com/lgpd_banner_c40aeb6e5b.svg) ### Automate consent management LGPD requires that businesses implement privacy by design and default. This means taking measures to ensure ongoing compliance with requirements for consent and proof of consent. With CookieYes you can - Auto-block third-party marketing cookies prior to user consent - Schedule cookie scanning for continuous compliance - Record user consent logs for regulatory audits ![Automate consent management](https://assets.cookieyes.com/consent_management_730052a633.svg) ### Generate compliant privacy policy Under the LGPD, businesses should implement a privacy policy to meet the requirements for transparency and include information on the personal data collected, the purpose of collection, how to exercise user rights, and more With our policy generators you can - Use our pre-built, legally-compliant policy templates - Generate your privacy policy and cookie policy in minutes - Simply copy-paste the legal policies to your website ![Generate compliant privacy policy](https://assets.cookieyes.com/policy_generators_dc10b32d81.svg) ## Achieve regulatory compliance with ease with our no-code cookie consent solution [Become LGPD Compliant](https://app.cookieyes.com/trial?plan=pro-monthly&ref=lp_LGPD_center) 14-day free trial Cancel anytime ## Learn more and take the first step towards LGPD compliance ![What is LGPD?](https://assets.cookieyes.com/pdpl_icon_a844f7c6eb.svg) ### What is LGPD? The General Data Privacy Law or Lei Geral de Proteção de Dados (LGPD) is a Brazilian data protection law that imposes obligations on companies for processing personal data and grants certain rights to individuals to protect their privacy. Modelled on the EU’s GDPR, the LGPD came into effect on September 18, 2020, and enforcement began on August 1, 2021. ![Who does LGPD apply to?](https://assets.cookieyes.com/apply_to_icon_c0205ce9f2.svg) ### Who does LGPD apply to? LGPD applies to all organizations that process the personal data of residents of Brazil whether or not the organization is established in Brazil, including businesses, public bodies, institutions as well as not-for-profit organisations. LGPD also applies to processing the personal data of an individual who was in Brazil at the time of data collection.The law protects personal data relating to an identified or identifiable natural person. ![What are the exceptions to the applicability of LGPD?](https://assets.cookieyes.com/penalty_icon_b3a2c9445d.svg) ### What are the exceptions to the applicability of LGPD? Violation of the LGPD provides can result in warnings, monetary penalties, suspension, publicizing of the violation, and partial or complete ban on the processing activities. The monetary fines for non-compliance can go up to a maximum of 2% of an organization’s annual revenue or up to BRL 50 million (approx. USD 12.8 M). ![What are consumer rights under LGPD?](https://assets.cookieyes.com/consumer_rights_icon_f33a6ebd2b.svg) ### What are consumer rights under LGPD? ![Right to confirm](https://assets.cookieyes.com/icon_info_33ae4f8847.svg) #### Right to confirm The right to get confirmation on their personal data processing. ![Right to access](https://assets.cookieyes.com/icon_access_2e8b82213f.svg) #### Right to access The right to access personal data and to have it available in a clear and readable format, free of cost. ![Right to correction](https://assets.cookieyes.com/icon_correction_d30a9d9c52.svg) #### Right to correction The right to request to correct, update, or complete personal data about them. ![Right to delete](https://assets.cookieyes.com/icon_delete_ba1643b859.svg) #### Right to delete The right to request the deletion of personal data if it is no longer needed by a business. ![Right to anonymization](https://assets.cookieyes.com/icon_anonymous_9c81eb32a0.svg) #### Right to anonymization The right to anonymization, blocking, or deletion of unnecessary, excessive, or data processed in violation of the law. ![Right to data portability](https://assets.cookieyes.com/icon_portable_2eda1b0600.svg) #### Right to data portability The right to portability of data to another service or product provider, upon express request. ![Right to information on data sharing](https://assets.cookieyes.com/icon_sharing_4d77c4ace6.svg) #### Right to information on data sharing The right to disclosure of information about other processors with whom personal data has been shared. ![Right to revoke](https://assets.cookieyes.com/icon_revoke_ccef04522f.svg) #### Right to revoke The right to revoke or withdraw consent to the processing of personal data. ![Right to object](https://assets.cookieyes.com/icon_object_98cb8e7c13.svg) #### Right to object The right to object and restrict the processing of personal data, and have information on the consequences of refusal. ## FAQ on LGPD Compliance **What is Brazil’s data privacy law?** The General Data Privacy Law or Lei Geral de Proteção de Dados (LGPD) is a data privacy law that regulates data processing in Brazil and sets out privacy rights for individuals in Brazil. It was signed into law in 2018 and came into effect on September 18, 2020. **What is personal data in LGPD?** The LGPD defines personal data as information relating to an identified or identifiable natural person. The law does not limit its definition of personal data to a set of identifiers or characteristics nor provides any specific examples for the same. The LGPD also defines certain types of data as ‘sensitive data’. This involves personal data on racial or ethnic origin, religious belief, political opinion, union membership or religion, philosophical or political organisation, health or sexual life, and genetic or biometric data. The LGPD does not prohibit the processing of sensitive data, but processing sensitive data is more restricted. **What are the exceptions to the applicability of LGPD?** There are some exceptions to the applicability of LGPD. It does not apply if: - Processing of personal data is carried out by a natural person for private and non-commercial purposes or - Personal data is processed exclusively for one of the following purposes: Journalistic or artistic expression, - Academic research, - Public safety, - National defence and security, - Investigation and prosecution of criminal offences **Does LGPD allow data transfer outside Brazil?** LGPD limits the transfer of personal data outside Brazilia unless the countries or organizations data is transferred to can provide an adequate level of protection of personal data. Data transfer is also permitted when it occurs within the means of Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs) or by global corporate norms. The law also recognises other grounds for transferring personal data outside Brazil, for international legal cooperation between government agencies or if the transfer is carried out with the consent of the data subject. **Who enforces LGPD Brazil?** Brazilian Data Protection Authority (ANPD) is the supervisory authority for the interpretation, application and enforcement of LGPD. Under the LGPD, ANPD has the authority to issue guidance and procedures concerning data protection and has investigatory powers to monitor data processing activities and issue sanctions in case of non-compliance. The ANPD also has corrective powers such as issuing warnings and fines, publicising the violation and blocking the processing of personal data relating to the violation. **Does GDPR apply to Brazil?** Brazil is not subject to the General Data Protection Regulation (GDPR) because it protects the rights to data privacy of EU and EEA residents. However, GDPR has extra-territorial scope, meaning businesses in Brazil that collect the personal data of EU/EEA residents in exchange for goods and services or for monitoring their behaviour, can come under the purview of GDPR. Similar to GDPR, the LGPD may also impact companies outside Brazil because of its extraterritorial scope. **How is LGPD different from GDPR?** The LGPD was influenced by the European Union’s General Data Protection Regulation (GDPR) and has borrowed key concepts from European law. But LGPD has expanded its coverage in some areas, for instance, LGPD established four additional legal bases for processing personal data than the GDPR. LGDP differs from GDPR in the details. Although both regulations require data breach notifications, GDPR has a stricter timeline of 72 hours for reporting while LGPD does not provide a definite timeline for breach notifications. Under the LGPD, controllers must appoint a DPO, but it is not an explicit requirement for data processors, while in GDPR, both controllers and processors must appoint a data protection officer (‘DPO’) in specific circumstances. **Where can I find additional resources on LGPD?** Here are some links you can refer to for additional reading: - [Official Text of LGPD](http://www.planalto.gov.br/ccivil_03/_Ato2015-2018/2018/Lei/L13709.htm) (in Portuguese) - [Simplified Guide on Brazil’s LGPD](https://www.cookieyes.com/blog/brazils-data-protection-law-lgpd/) ## Fast-track your LGPD compliance in minutes Set up a cookie consent banner in 3 simple steps and automate your compliance. [Become LGPD Compliant](https://app.cookieyes.com/trial?plan=pro-monthly&ref=lp_LGPD_bottom) 14-day free trial Cancel anytime **Form** - Enter your website URL (`url`, text, required) Submit: "Scan website"