LGPD or n.13,709/2018 Lei Geral de Proteção de Dados Pessoais translated as General Data Protection Law
The bill has been in effect since September 18, 2020.
The law's primary aim is to unify 40 different Brazilian laws that regulate the processing of personal data. The LGPD contains provisions and requirements related to the processing of personal data of individuals, where the data is of individuals located in Brazil, where the data is collected or processed in Brazil, or where the data is used to offer goods or services to individuals in Brazil.
The LGPD contains 65 articles and defines new legal concepts in Brazilian law, such as personal data and sensitive personal data. The law sets out the rights of the subjects of personal data, and under what conditions that data can be collected, processed, stored, and shared. It also specifies the obligations of the entity processing that data, and the exceptions to the law.