Brazil's Privacy Law: LGPD

The Basics of the LGPD: Brazil’s New Privacy Law

Have you heard? Brazil passed its own privacy law. The law, which is called Lei Geral de Protecao de Dados (or the LGPD), is similar in scope and effect to the European Union’s General Data Protection Regulation (GDPR). Like the GDPR, the LGPD requires businesses handling personal data to be accountable for collecting, using, and managing that information appropriately. It also provides individuals with new rights. The law is scheduled to go into effect on August 15, 2020. In this article, we will walk you through the basics of the LGPD, including some of the most relevant parts of the law for our customers.

What is Personal Information Under the LGPD?

The LGPD defines personal information very broadly. If information can be traced back to, or is related in some way to, an individual, it is likely to be considered personal information under the LGPD.

In addition to the kinds of information you might think about as personal information — name, address, email address, financial information, contact information, identification numbers, etc. — personal information can in some cases be information related to an individual’s digital life, like an IP address, geolocation, browsing history, cookies, or other digital identifiers. It could also include other types of information about an individual, including information about their physical, mental, social, economic or cultural identities.

Who Has Obligations Under the LGPD?

Generally speaking, the LGPD applies to all sectors of the economy, both public and private, online and offline applies to the processing of personal information irrespective of the country in which a company’s headquarters are located, or of the country in which the data is located, provided that:

• processing operations are carried out in Brazil;
• personal information was collected in Brazil; or
• personal information belongs to individuals located in Brazil.

There are certain exceptions that may apply to you. If you are unsure if you have obligations under this law, consult with your legal counsel.

What rights do individuals have under the LGPD?

The LGPD establishes a number of rights. Under the LGPD, individuals can:

• Ask whether we process personal information about them, and if we do, to access data we hold about them and certain information about how we use it and who we share it with;
• Ask us to update or correct personal information if it is inaccurate, incomplete or out-of-date data;
• Ask us to anonymize, block, or delete unnecessary or excessive data or data that is not being processed in compliance with the LGPD;
• Ask us to port their data to another service or product provider, by means of an express request;
• Ask us to delete personal data;
• Ask us to provide to provide information about the possibility of denying consent and the consequences of such denial; and
• Withdraw or revoke your consent.

Please note that not all of these rights listed above are absolute, and limitations/exceptions apply in some cases.

How Are We Helping You Comply with LGPD?

We are dedicated to ensuring that our products allow our customers to comply with their obligations under the LGPD. Additionally, where required by law, we will support you in fulfilling LGPD-related requests that you receive from your customers.

How are we complying with the LGPD?

Our customers will be able to opt-out of receiving marketing/promotional emails at any time by clicking the ‘unsubscribe’ link included at the bottom of every marketing email they receive. (Note: customers cannot opt-out of transactional emails, as they are required for us to provide our services.) Additionally, when you visit our website, tools that allow you to select your cookie preferences will be deployed.

Where can I learn more about how you handle my privacy?

Please consult our Privacy Notice for more information about how we use your personal information.

Our Privacy Center explains what information we collect about you as a customer and how we handle your personal information. This notice includes descriptions of how your personal information is used by us.