Brazil Enacts a Full-Fledged Data Protection Law

Brazil Enacts a Full-Fledged Data Protection Law

Our firm has translated the full text in English, see below

Brazil has enacted today (August 15, 2018) a full-fledged data protection legislation (Brazilian General Data Protection Law – Lei Geral de Proteção de Dados Pessoais – “LGPD”). The law will enter into effect in 18 months after the enactment.

Our law firm has translated the full text of the law in English, which can accessed in the following link: https://www.pnm.adv.br/wp-content/uploads/2018/08/Brazilian-General-Data-Protection-Law.pdf

The new legislation sets forth comprehensive rules regarding the processing of data from data subjects located in Brazil. Similar to the European GDPR, the law has extraterritorial effects and is applicable to companies and organizations involved in any form of processing of personal data of data subjects located in the country.

The LGPD extensively regulates activities of personal data processing, granting a new set of rights to users regarding the protection of their privacy, and enhanced control of their data. The new rules cover all phases of the processing of personal data, from its gathering to its analysis, storage and transfer to third parties.

The legislation also establishes sanctions to companies or organizations that fail to comply with its rules, including fines up to two percent (2%) of a private legal entity’s, group or conglomerate revenues in Brazil, up to a total maximum of fifty million reais (BRL 50,000,000.00) per violation.

Our firm will be happy to provide any further information. Our partner Ronaldo Lemos is an internationally respected Brazilian lawyer, specialized in technology and all matters related to personal data. He is one of the authors of Brazil´s Internet Law (“Marco Civil”) and has been directly involved in the 8-year process that led to the new Data Protection Legislation.

Do not hesitate to contact us for any additional information.

PNM Advogados