Brazil passed its federal data protection law, Lei Geral de Proteção de Dados (LGPD) into law in 2018. The law came into effect on August 16, 2020, with penalties becoming applicable as of August 1, 2021.
Modelled after the EU’s GDPR, LGPD shares close similarities with it, including extra-territorial applicability, data subject rights, the requirement for a legal basis for data processing and breach notifications. However, there are nuanced differences in their scope, requirements, and penalties.
Share this infographic on: