LGPD: Curso de Capacitação em Privacidade e Proteção de Dados

Inspired by the European regulation (General Data Protection Regulation – GDPR), the Brazilian General Data Protection Act (in Portuguese, LGPD, Lei Geral de Proteção de Dados) establishes rules on collecting, handling, storing and sharing of personal data managed by organizations.

In August 2018, with presidential approval companies were given  18 months to adjust to the new rules.

Among the actions curbed by the LDPG are the collection and use of personal data without consent, by both the private sector and public authorities, as well as the use of personal information for practicing unlawful or unfair discrimination.

Who is impacted?

The legislation is part of the Brazilian context of progressive adaptation to the best global data management practices and it covers all companies that offer services or have operations involving data handling in Brazil.

What does the law say?

Companies that violate the new law will be subject to the application of warnings, fines, embargoes, suspensions and partial or total bans to performing their activities. Fines can reach up to 2% of the organization’s revenue, with a limit of R$50 million per violation.

Companies will have to demonstrate compliance and responsibility with the laws in force, in order to increase the level of trust of all their stakeholders.

In addition to securing individual rights, the LGPD aims to encourage the sustainable development of the economy and the businesses, based on the best international practices.

Both the Brazilian law and the GDPR require a strategic approach to the handling of personal data, which represents, on the other hand, a great opportunity for companies. Organizations can leverage regulations for obtaining a competitive advantage in the use of such data, with a correct planning and the application of good privacy practices.