The European Commission finalized an adequacy decision with Brazil, finding Brazil’s General Data Protection Law (LGPD) provides protections equivalent to the EU’s GDPR, enabling personal data to flow freely from the EU to Brazil without additional safeguards. The agreement expands the list of “adequate” jurisdictions and supports digital trade. The European Data Protection Board and EU Council backed the decision, which will be reviewed every four years.
