| General Personal Data Protection Law | |
|---|---|
| National Congress of Brazil | |
| |
| Citation | Law No. 13.709 August 14, 2018 |
| Territorial extent | Worldwide |
| Passed by | Chamber of Deputies |
| Passed | May 29, 2018 |
| Passed by | Federal Senate |
| Passed | July 10, 2018 |
| Signed by | Michel Temer, President of Brazil |
| Signed | August 14, 2018 |
| Commenced | August 16, 2020 |
| Administered by | Data Protection National Authority |
| Legislative history | |
| First chamber: Chamber of Deputies | |
| Bill title | Law Project no. 4060/2012 |
| Introduced by | Dep. Milton Monti (PL-SP) |
| Introduced | June 13, 2012 |
| First reading | June 28, 2012 |
| Second reading | May 29, 2018 |
| Third reading | May 29, 2018 |
| Second chamber: Federal Senate | |
| Bill title | Chamber Law Project no. 53/2018 |
| Received from the Chamber of Deputies | June 1, 2018 |
| First reading | June 1, 2018 |
| Second reading | July 10, 2018 |
| Status: In force | |
The General Personal Data Protection Law (Portuguese: Lei Geral de Proteção de Dados Pessoais, or LGPD; Lei 13709/2018), is a statutory law on data protection and privacy in the Federative Republic of Brazil.[1] The law's primary aim is to unify 40 different Brazilian laws that regulate the processing of personal data.[2] The LGPD contains provisions and requirements related to the processing of personal data of individuals, where the data is of individuals located in Brazil, where the data is collected or processed in Brazil, or where the data is used to offer goods or services to individuals in Brazil.[3]
The LGPD became law on September 18, 2020, but its enforceability was backdated August 16, 2020. Sanctions under the regulation will only be applied from August 1, 2021.[4][5]
The national data protection authority responsible for enforcement of the LGPD is the Autoridade Nacional de Proteção de Dados, or ANPD.[6]