What's LGPD?

The General Law for the Protection of Personal Data, Law nº 13.709/2018, is the Brazilian legislation that regulates the activities of processing personal data and that also amends articles 7 and 16 of the Marco Civil da Internet.

The legislation is based on several values, such as respect for privacy; to informative self-determination; freedom of expression, information, communication and opinion; the inviolability of intimacy, honor and image; to economic and technological development and innovation; to free enterprise, free competition and consumer protection and to the human rights of freedom and dignity of people.

The LGPD creates a set of new legal concepts (eg "personal data", "sensitive personal data"), establishes the conditions under which personal data can be processed, defines a set of rights for data subjects, generates specific obligations for the data controllers and creates a series of procedures and rules to be more careful with the handling of personal data and sharing with third parties.[7] The law applies to all information related to an identified natural person or that may be identifiable and to data dealing with racial or ethnic origin, religious conviction, political opinion, membership in a union or organization of a religious, philosophical or political nature, referring data health or sexual life, genetic or biometric data, whenever they are linked to a natural person.

Access the law here: LAW No. 13.709