Is Brazil's LGPD like the GDPR?

Yes. The LGPD is closely modelled on the GDPR, with similar principles, data subject rights, and ten legal bases for processing including consent and legitimate interest. It is enforced by the ANPD.

What are the maximum LGPD fines?

Fines under the LGPD reach up to 2 percent of a company's revenue in Brazil, capped at 50 million reais per violation.

Amerika Latin dan Caribbean

Persetujuan kuki di Brasil

Persetujuan dan undang-undang privasi di Brasil

Brazil's LGPD is closely modelled on the GDPR and is enforced by the ANPD. It recognises ten legal bases for processing, of which consent is only one, so businesses can rely on legitimate interest or legal obligation in many cases. Fines are capped at 2 percent of Brazilian revenue, up to 50 million reais per violation, which is lower in absolute terms than EU fines. The ANPD has published guidance on cookies that treats them like other personal data processing, meaning a legal basis is required and consent is expected for non-essential tracking. Privacy notices in Brazilian Portuguese are expected, and data subject rights mirror the GDPR.

Pihak berkuasa

Autoridade Nacional de Proteção de Dados (ANPD)

Status

LGPD in force since September 2020, with sanctions applied since August 2021

Undang-undang utama

LGPD

Bahasa

Português (Brasil)

Siapa yang wajib mematuhi

Any organization processing personal data of individuals in Brazil, regardless of where it is based.

Penalti

Up to 2 percent of Brazil revenue, capped at 50 million reais per violation

Kewajipan utama

Lawful basis for processing
Freely given, informed consent
Records of processing
Honor data subject rights
Report incidents to the ANPD

Panduan tempatan

Choose the right legal basis among the ten the LGPD provides
Obtain consent for non-essential cookies under ANPD guidance
Provide notices in Brazilian Portuguese
Honour data subject rights modelled on the GDPR

Bagaimana ConsentX membantu

Consent-first banner with clear basis
Evidence and receipts
DSAR handling
Region rules for Brazil

Mula secara percuma

yoursite.com

Brasil

Kami menghargai privasi anda

Kami meminta persetujuan anda sebelum sebarang kuki bukan penting, mengikut peraturan yang terpakai di wilayah anda.

Benarkan semuaTolak yang bukan pentingUrus keutamaan

Persetujuan direkodkan

sha256 · chain ok

Halaman ini diterjemah secara mesin dan mungkin mengandungi kesilapan. Sila semak butiran undang-undang dengan penasihat guaman tempatan yang berkelayakan sebelum bergantung padanya.

Sediakan Brasil dengan ConsentX

Sepanduk mengikut wilayah, sekatan skrip awal, DSAR dan bukti kalis usik.

Mula secara percuma Tempah demo

Cara mematuhi Brasil dengan ConsentX

1
Imbas laman web anda
Jalankan imbasan percuma untuk mencari setiap kuki dan penjejak di laman anda, supaya anda tahu dengan tepat apa yang memerlukan persetujuan di bawah Brasil.
2
Paparkan sepanduk persetujuan mengikut wilayah
Tambah sepanduk ConsentX. Ia mengesan wilayah setiap pelawat dan memaparkan secara automatik pengalaman persetujuan yang dikehendaki Brasil.
3
Sekat penjejak sehingga ada persetujuan
Kekalkan kuki dan penjejak bukan penting dalam keadaan disekat sehingga pelawat bersetuju, supaya tiada apa-apa berjalan sebelum persetujuan.
4
Rekod bukti kalis usik
Setiap pilihan disimpan sebagai resit persetujuan kalis usik yang boleh anda kemukakan dalam audit Brasil.
5
Uruskan permintaan data tepat pada masanya
Gunakan aliran kerja DSAR terbina dengan pemasa SLA untuk menjawab permintaan akses, pemadaman dan penarikan diri dalam tempoh yang ditetapkan undang-undang.