Automate compliance with Brazil’s general data protection law

The LGPD requires all data processors to be transparent about their use of personal data, collect valid consent and offer covered natural persons free access to their data. Companies must document each purpose and make it available to consumers in an updated public privacy policy. The law establishes fundamental rights for Brazilians and companies must fulfill and process personal data requests in a reasonable time. It also covers data security and companies must inform data subjects if they were exposed to a data breach. 

For more information, read The Ultimate Guide to LGPD Compliance. 

The LGPD covers any personal data processing of Brazilians or persons located in Brazil. This means that even if a company is based outside of the country, they are still subject to the law. Unlike other privacy laws such as the California Consumer Privacy Act (CCPA) and California Privacy Act (CPRA), there is no size threshold so even small businesses are subject. 

We help you meet the LGPD’s requirements by operationalizing them in a single platform. Minimize the risk of non-compliance with automated data mapping and discovery, risk assessments, incident tracking, and managing data subjects' rights and consent. We also provide access to the world’s largest regulatory database so you can stay up to date with the law’s amendments and rule changes.