DPDPA is now in force in India. Run a free privacy scan on your site. Scan now

🇧🇷 Brazil

LGPD compliance with ConsentX

Lei Geral de Proteção de Dados

In short
Brazil's general data protection law, closely modeled on GDPR, requiring a legal basis such as consent for processing personal data.
Region

Brazil

Status

In force since 2020

Group

Americas

Who it applies to

Any organization processing personal data of individuals in Brazil, regardless of where it is based.

Penalties

Up to 2% of Brazil revenue, capped at R$50 million per violation.

Key obligations

  • Lawful basis for processing
  • Freely given, informed consent
  • Records of processing
  • Honor data subject rights
  • Report incidents to the ANPD

How ConsentX helps

Consent-first banner with clear basis

Evidence and receipts

DSAR handling

Region rules for Brazil

Get LGPD ready with ConsentX

Start free, or book a walkthrough with our team.

This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified counsel.

Frequently asked questions

Is LGPD like GDPR?+

Yes, LGPD is closely modeled on GDPR, with consent as one lawful basis and similar data subject rights.