General Personal Data Protection Law

General Personal Data Protection Law
National Congress of Brazil
  • Portuguese: Dispõe sobre a proteção de dados pessoais e altera a Lei nº 12.965, de 23 de abril de 2014 (Marco Civil da Internet)
    Diposes about personal data protection and makes changes to Law 12965 of April 23, 2014
CitationLaw No. 13.709 August 14, 2018
Territorial extentWorldwide
Passed byChamber of Deputies
PassedMay 29, 2018
Passed byFederal Senate
PassedJuly 10, 2018
Signed byMichel Temer, President of Brazil
SignedAugust 14, 2018
CommencedAugust 16, 2020
Administered byData Protection National Authority
Legislative history
First chamber: Chamber of Deputies
Bill titleLaw Project no. 4060/2012
Introduced byDep. Milton Monti (PL-SP)
IntroducedJune 13, 2012
First readingJune 28, 2012
Second readingMay 29, 2018
Third readingMay 29, 2018
Second chamber: Federal Senate
Bill titleChamber Law Project no. 53/2018
Received from the Chamber of DeputiesJune 1, 2018
First readingJune 1, 2018
Second readingJuly 10, 2018
Status: In force

The General Personal Data Protection Law (Portuguese: Lei Geral de Proteção de Dados Pessoais, or LGPD; Lei 13709/2018), is a statutory law on data protection and privacy in the Federative Republic of Brazil.[1] The law's primary aim is to unify 40 different Brazilian laws that regulate the processing of personal data.[2] The LGPD contains provisions and requirements related to the processing of personal data of individuals, where the data is of individuals located in Brazil, where the data is collected or processed in Brazil, or where the data is used to offer goods or services to individuals in Brazil.[3]

The LGPD became law on September 18, 2020, but its enforceability was backdated August 16, 2020. Sanctions under the regulation will only be applied from August 1, 2021.[4][5]

The national data protection authority responsible for enforcement of the LGPD is the Autoridade Nacional de Proteção de Dados, or ANPD.[6]

  1. ^ 13709/2018
  2. ^ "What is the LGPD? Brazil's version of the GDPR". gdpr.eu. 31 July 2019. Retrieved December 23, 2020.
  3. ^ "Data Protection Laws of the World". dlapiperdataprotection.com. Retrieved December 23, 2020.
  4. ^ "In rapid-fire reversal, Brazil effectuates privacy law immediately". iapp.org. Retrieved December 23, 2020.
  5. ^ "Data Protected - Brazil". linklaters.com. Retrieved December 23, 2020.
  6. ^ Alonzo Martinez (September 4, 2020). "Brazil's New Data Protection Law Moves Forward Without Warning – Employers Race To Comply". forbes.com.