LGPD, explained
Brazil's General Personal Data Protection Law provides a framework for covered processing of personal information.
- The field
- Legal
- Reading time
- 1 minute
- In this entry
- Meaning · relevance · limits
The meaning
Brazil's General Personal Data Protection Law provides a framework for covered processing of personal information.
Why it matters
A project with relevant Brazilian users or processing should assess responsibilities, transparency, rights and security across its data flow.
The boundary
The service operator and application owner may have different roles and duties.
Include the application’s real audience
A Portuguese-language membership service handles personal information connected with people in Brazil. Before launch, its operator maps collection, access and retention and checks the LGPD’s applicability. Hosting geography is relevant to transfers and operations, but it is not a substitute for understanding the service’s processing duties.
- Use the current law and ANPD guidance to assess the concrete processing activity.
- Make the privacy notice describe the real application and its suppliers, rather than copying a host’s notice.