DataTerminology.comNEW
Also known as: Lei Geral de Proteção de Dados
Brazil’s General Data Protection Law governing personal data processing, rights, legal bases, and enforcement by the ANPD.
DESCRIPTION
LGPD (Lei Geral de Proteção de Dados) is Brazil’s comprehensive data protection law, harmonizing principles with GDPR while outlining local obligations and enforcement. It defines lawful bases, data subject rights, and controller/processor duties. The National Data Protection Authority (ANPD) oversees compliance and penalties. Organizations must implement governance, notices, contracts, and security measures for Brazilian personal data.
ALTERNATIVE DEFINITIONS
Presidência da República (Brazil)
Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD) dispõe sobre o tratamento de dados pessoais, inclusive nos meios digitais, por pessoa natural ou por pessoa jurídica de direito público ou privado.
Official statute stating scope of personal data processing across sectors and media.
ANPD
The National Data Protection Authority (ANPD) is responsible for ensuring the protection of personal data and for regulating, supervising and enforcing LGPD.
Clarifies ANPD’s role in regulation and enforcement.
Wikipedia
The General Data Protection Law (LGPD) is a Brazilian law that regulates the processing of personal data and is largely inspired by the EU’s GDPR.
Positions LGPD within global privacy landscape and GDPR influence.
RELATED TERMS
Data Subject Rights Controller Microprocessor Consent Management ANPD Data Minimization Data Protection Impact Assessment Sensitive Personal Data International Transfers
COMPETING TERMS
KNOWLEDGE AREAS
Data Privacy & Compliance Data Governance Data Security AI Governance
TARGET AUDIENCE
Data Privacy Officer Chief Information Security Officer Chief Data Officer Data Governance Manager IT Manager Chief Information Officer
EXTERNAL SOURCES
- Wikipedia - General Data Protection Law (Brazil)
- Brazilian Government - Official LGPD legal text
- ANPD - Authority overview and guidance
- IAPP - Practical LGPD summary
TOP QUESTIONS
What is LGPD?
Brazil’s General Data Protection Law governing personal data processing, rights, and enforcement by ANPD.
Category: Definition
How does LGPD compare to GDPR?
LGPD is largely inspired by GDPR with similar principles, but includes local definitions and enforcement mechanisms through ANPD.
Category: Distinction
Who must comply with LGPD?
Organizations processing data in Brazil or of individuals located in Brazil, regardless of sector or medium.
Category: Applicability
What rights exist under LGPD?
Access, correction, deletion, portability, and revocation of consent, among others.
Category: Overview
What are common LGPD compliance mistakes?
Incomplete data mapping, weak consent records, and inadequate contracts with processors are frequent gaps.
Category: Mistakes
What’s the risk of noncompliance with LGPD?
Penalties, enforcement actions, reputational harm, and required remediation efforts.
Category: Risk
How do organizations prepare for LGPD?
Inventory processing activities, update notices and contracts, implement rights workflows, and strengthen security controls.
Category: Requirements
Does LGPD regulate international data transfers?
Yes, it imposes requirements and mechanisms for lawful cross-border transfers.
Category: Compliance
Where can I learn more about LGPD?
Consult the official law text, ANPD guidance, and IAPP resources for practical advice.
Category: Learning