LGPD

Brazil's LGPD governs personal data with legal bases, data-subject rights, ANPD supervision and extra safeguards for children's data.

Definitions only — a term explained here is not a service we sell.

The LGPD is Brazil's general data-protection law. It sets legal bases for processing, rights for data subjects and specific rules for children's data, and the ANPD supervises compliance.

Lead handling follows the same retention and deletion promises site-wide.

What the law requires

Lei 13.709/2018 sets ten legal bases for processing, principles such as purpose limitation, and rights for data subjects. Children's data needs a specific legal basis and safeguards under Article 14.

The ANPD is the supervisory authority and issues guidance. Cross-border transfers need a defined mechanism. The structure resembles the GDPR, but the legal bases, the data protection officer role and the transfer rules have their own definitions. This is general information, not legal advice.

FAQ

Does LGPD apply to foreign companies?

It can, when the processing targets people in Brazil or the data is collected in Brazil. The company's location is not the only test.

What is the ANPD?

The Autoridade Nacional de Proteção de Dados, the regulator that enforces the LGPD and issues guidance.

What about children's data?

Article 14 sets the conditions: a specific legal basis and safeguards. Get counsel before designing a service that targets minors.

Learn more

Sources

  1. ANPD: Autoridade Nacional de Proteção de Dados (Brazil)
  2. Lei 13.709/2018: Lei Geral de Proteção de Dados Pessoais