Implementation of Brazilian data protection regulation takes shape 

On 14 August 2018, the Brazilian General Law for the Protection of Personal Data (LGPD) - Law No. 13,709/2018 -  entered into force. Since then, the Brazilian National Authority for Data Protection (ANPD) has been created and has taken up its role in regulating the implementation of LGPD starting with a new regulation.   

ANPD is currently collecting feedback on the regulation from micro and small companies - including start-ups and individuals who process personal data for economic purposes. 

The Authority wants to include the opinion of the industry because it can make an important contribution in drafting the regulation. General feedbacks and assessment may be given until 1 March 2021 by both a form (download here) sent by e-mail to consultapublica@anpd.gov.br and/or a previously scheduled meeting with the Authority through the aforementioned e-mail.  

ANPD’s Strategic Planning for 2021-2023, published on 01 February 2021, grants important guidelines for the public assessment and feedback on the new regulation. The Strategic Planning defines the Authority’s main strategic objectives and lists indicators and planned actions which should be carried out in order to fulfil the indicated objectives.  

GPQI Brazil has been engaged in the establishment and effects of the law for Brazilian companies and industry, reckoning challenges faced by the productive sector and providing support for governmental authorities on pursuing assessments.  

Recently, GPQI, Alliance for Integrity and the Brazilian National Confederation of Industry have launched a webinar “LGPD: Adequacy journey for data protection in practice”, intended to support companies on complying with the regulation.