In August, Brazilian President Michel Temer signed into law the new General Data Protection Law (LGPD), which establishes a period of 18 months for data processing agents to adjust to its rules. The key provisions of the LGPD closely mirror the European Unions (EU) General Data Privacy Regulation (GDPR) and applies to any agent that performs data processing. Relating not only to companies incorporated in Brazil, the regulation also applies to entities that process or collect data in the Brazilian territory and to those who aim to supply goods and services to anyone located in Brazil. In addition to defining controller and processor roles, the LGPD also explains data subject rights, such as easy access to data that has been collected; withdrawal of consent; and portability of personal data to another good or service provider.
