top of page

General Data Protection Law

The General Law for the Protection of Personal Data - Law 13.709/2018 (“LGPD”) regulates how organizations can use personal data in Brazil, by establishing detailed rules for the collection, use, processing and storage of personal data.

The European Union Personal Data Protection Law (GDPR - General Data Protection Regulation), in force since May 25, 2018, served as the basis for the foundations of Brazilian law.

Who does it apply to?

Legal entity under public or private law

Natural person (except treatment for exclusively private and non-economic purposes)

The law does not apply to the processing of personal data carried out exclusively for:

  • Journalistic

  • Artistic

  • Academic

  • Public security and national defense

  • state security

  • Investigation and prosecution of criminal offenses



Implementation of the Law Compliance Program

Implementation review

Continuous program monitoring

Other services

Support in the appointment of the DPO (definition, roles and responsibilities)

Customer service management

Contract review and adequacy

Development of policies and procedures

bottom of page