// CLUSTER

Data Protection in Brazil

Brazilian LGPD, ANPD, cross-border GDPR, privacy policy, legal bases, incidents, DPO.

// CLUSTER ARTICLES

Does GDPR Apply to Brazilian Companies? When EU Privacy Law Reaches Outside Europe

GDPR reaches Brazilian companies offering goods or monitoring data subjects in the EU (Article 3(2)). Fines up to €20M or 4% of global annual turnover.

Read article →

LGPD and email marketing: which legal basis is correct

LGPD email marketing: consent (Art. 7 I) or legitimate interest (Art. 7 IX). Purchased lists without direct consent create regulatory exposure.

Read article →

LGPD Compliance Checklist for Digital Sellers in Brazil

Use this practical LGPD checklist for digital sellers in Brazil: legal bases, notices, vendor contracts, and incident response priorities.

Read article →

Website privacy policy: what Brazil's LGPD requires

LGPD doesn't literally require 'privacy policy' — Art. 9 requires accessible info on data processing. Without it: ANPD fines + loss of payment.

Read article →
also relevant

Deepfake using my image: legal options in Brazil

Deepfake violates personality (CF art. 5 X), LDA art. 89, LGPD art. 11; may be a crime. Act in 24h: document, takedown, preserve evidence.

Read article →
also relevant

Brazil's Marco Civil da Internet: A Business Guide

Marco Civil (Law 12,965/2014) applies to anyone providing online services in Brazil, foreign included. Art. 19: conditional immunity for 3rd-party content.

Read article →
also relevant

SaaS Terms of Service in Brazil: What the Law Actually Requires

No Brazilian law mandates 'terms of service' — Marco Civil, CDC and LGPD impose concrete obligations on SaaS. B2C liability limits are void (CDC Art. 51).

Read article →
View all articles

Have a legal question about Data Protection in Brazil?

Talk to our team