LGPD: Lei Geral de Proteção de Dados Pessoais (Brazil)
What the LGPD covers, and what it means for your website analytics
Official name: Lei Geral de Proteção de Dados Pessoais (LGPD), Law No. 13,709/2018, Brazil’s General Data Protection Law. In force since 18 September 2020, it governs how personal data of people in Brazil is processed.
See all privacy lawsAt a glance
Brazil's general data protection law
The LGPD closely follows the GDPR. Every use of personal data needs one of ten legal bases, including consent and legitimate interest, and people can access, correct, delete and move their data.
Who it covers
Anyone processing data in Brazil or offering goods or services to people there
What it means for websites
IP addresses and cookie IDs can be personal data, and the ANPD has cookie guidance
Who enforces it
The National Data Protection Authority (ANPD)
Maximum fines
Up to 2% of revenue in Brazil, capped at R$50 million per violation
Further reading
Everything you need on this law
The LGPD
The official text of Brazil’s Law No. 13.709/2018, in Portuguese and with all amendments.
Read the official textBrazil’s data protection authority
The ANPD enforces the LGPD and publishes its regulations and guidance, in Portuguese.
Visit the ANPDThe GDPR
The EU law the LGPD was modeled on, which also applies if your site has visitors from the EU.
Read our GDPR guideLGPD vs GDPR
Who the LGPD applies to, the rights it gives visitors and where it differs from the GDPR.
Read the articleMore privacy laws
Guides to 14 more laws, from the GDPR to the CCPA, and what each one asks of your website.
See all privacy lawsPrivacy by default
Less data, the same insights
TWIPLA’s default Maximum Privacy Mode keeps what you collect to a minimum, wherever your visitors are:
- Visitors are counted with a one-way hash, the only identifier stored
- Reports show trends across your audience, never one person’s page history
- All data is hosted in Germany, under a Data Processing Agreement that lists every subprocessor
- An optional opt-out link lets visitors switch off TWIPLA tracking entirely
Every privacy law sets its own rules. Custom Country Data lets you choose the privacy mode for visitors from each country, so you can match it to the law that applies there.
Proof, not promises
How TWIPLA respects your your Brazilian visitors’ privacy
Privacy modes and country settings
How to choose one of four privacy modes, and set a different one for visitors by country.
Read the guideVisitor opt-out
Where any visitor can switch off TWIPLA tracking for themselves, at any time.
See the opt-outWhat to put in your privacy policy
Ready-to-use wording for describing TWIPLA in your privacy policy.
Get the wordingOur Data Processing Agreement
The processing agreement every TWIPLA customer signs, with all subprocessors listed.
Read the agreementWhy we host in Germany
Why all TWIPLA data is stored in Hetzner data centers in Germany.
Read the articleLegal disclaimer
Helpful guidance, not legal advice
This page explains the law in general terms. Laws change, and how they apply depends on your business, your visitors and how you configure TWIPLA.
Unless another mode is named, statements about compliance refer to Maximum Privacy Mode, our default setting. For advice on your situation, please consult a qualified legal professional.
Questions about how TWIPLA fits this law? Email our team at consentless@twipla.com.
