On December 21, 2021, the Brazilian Data Protection Authority (ANPD) updated instructions on how and when data subjects can file a complaint against a data controller for possible violation of their rights under the General Data Protection Law (LGPD). The LGPD is Brazil’s all-encompassing data protection law similar to the European Union’s GDPR. The LGPD imposes certain requirements on data processing agents (which include controllers and processors of data) to safeguard the data privacy rights of individuals (data subjects). The ANPD has the authority to impose administrative sanctions for LGPD violations. What steps does a data subject need to take to get their request(s) answered or addressed?
