The Brazilian General Data Protection Law (LGPD – Law n. 13.709, of August 14, 2018) was approved in 2018, however, it only entered into force on September 18, 2020.

The LGPD regulates the processing of personal data in Brazil, both in physical media, and digital platforms, as well as altering the way that public and private institutions collect, store and make available user information, guaranteeing privacy and security to Brazilians against its misuse, commercialization and data leak.

However, in order to give individuals and legal entities time to adapt to the law, the beginning of the application of penalties will be start on August 1, 2021.Violators will be subject to administrative sanctions, as well as simple and daily fines, which can include anything from 2% of sales to 50 million reais.