General Personal Data Protection Law

The General Personal Data Protection Law , is a <a href="/facts/Statutory_law/UCL1ARYE">statutory law</a> on <a href="/facts/Information_privacy/fb6DMpdN">data protection</a> and <a href="/facts/Privacy_law/MqQ3j0UU">privacy</a> in the <a href="/facts/Federative_Republic_of_Brazil/QHkG46GL">Federative Republic of Brazil</a>. The law's primary aim is to unify 40 different Brazilian laws that regulate the processing of <a href="/facts/Personal_data/384PbBg5">personal data</a>. The LGPD contains provisions and requirements related to the processing of personal data of individuals, where the data is of individuals located in Brazil, where the data is collected or processed in Brazil, or where the data is used to offer goods or services to individuals in Brazil.
The LGPD became law on September 18, 2020, but its enforceability was backdated August 16, 2020. <a href="/facts/Sanctions_(law)/tVGF40J8">Sanctions</a> under the regulation will only be applied from August 1, 2021.
The <a href="/facts/National_data_protection_authority/sP0qRvYz">national data protection authority</a> responsible for enforcement of the LGPD is the Autoridade Nacional de Proteção de Dados, or ANPD.

General Personal Data Protection Law open-in-new

General Personal Data Protection Law