As reported by numerous Brazilian privacy professionals, Brazil's new privacy law – Lei Geral de Proteção de Dados or LGPD - is now in full effect with the sanction of Law 14508 by Brazilian President Jair Bolsonaro. The birth of a new national privacy law is a unique day for privacy professionals. That is particularly true here given that Brazil is the largest country in South America and the sixth largest country in the world by population.
There is still work to be done to fully implement LGPD – such as the establishment of Brazil's national data protection authority. However, based on its scope – including its purported extra-territorial jurisdiction and GDPR-like regulation of cross-border data transfers – LGPD could impact businesses across the globe if it is fully implemented and enforced.
For a deeper dive into LGPD's provisions, see our blog post here.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.