BRAZIL-LGPD

Brazil LGPD compliance regulation modern detailed.

Définition

Brazil LGPD (Lei Geral de Protecao de Dados Pessoais, Lei 13709/2018 published aout 2018, effective 18 septembre 2020 + sanctions effective 1 aout 2021) est la GDPR-inspired Brazilian data protection law qui regulate processing of personal data of individuals in Brazil par data controllers + processors (regardless of where established), implements rights similar GDPR (access + correct + delete + portability + opt-out + multiple), legal bases for processing + Data Protection Officer required + breach notification + Records of Processing Activities + ANPD (Autoridade Nacional de Protecao de Dados) supervisory authority. Detail technique + scope d'application + obligations conformite + sanctions non-conformite + processus reporting + impact entreprises in-scope + alignement avec regulations adjacentes nationales + internationales + governance + supervisory authorities + timeline implementation + transitions + jurisprudence + best practices documentation industry adoption.

Origine

LGPD Lei 13709/2018 published aout 2018 ; effective 18 septembre 2020 ; sanctions 1 aout 2021 ; ANPD supervisory authority.

Exemple en contexte

Brazilian e-commerce Mercado Livre processes ~200M user personal data : LGPD compliance includes (1) Updated privacy notices Brazilian Portuguese, (2) DPO appointed + registered with ANPD, (3) Records of Processing Activities (Registro de Operacoes de Tratamento) maintained, (4) Data subject rights request portal + responses within ~15 days legal deadline, (5) Data breach notification ANPD + affected users 'reasonable timeframe' + ANPD-issued guidance reaffirms.

Termes liés

• GDPR v3 — inspiring model.