General Data Protection Law
The General Law for the Protection of Personal Data - Law 13.709/2018 (“LGPD”) regulates how organizations can use personal data in Brazil, by establishing detailed rules for the collection, use, processing and storage of personal data.
The European Union Personal Data Protection Law (GDPR - General Data Protection Regulation), in force since May 25, 2018, served as the basis for the foundations of Brazilian law.
Who does it apply to?
Legal entity under public or private law
Natural person (except treatment for exclusively private and non-economic purposes)
The law does not apply to the processing of personal data carried out exclusively for:
Public security and national defense
Investigation and prosecution of criminal offenses