Starting August 1, 2021, the Brazilian Data Protection Law (LGPD) has some teeth. The processing of employees’ personal data in Brazil and the international transfer of such data to U.S. headquarters are subject to the LGPD. Therefore, companies with operations in Brazil should ensure they have adequate mechanisms to process personal data to avoid charges for violations of data privacy rights. More information can be found from the Brazilian National Data Protection Agency, which has put together a two-year plan to address topics, guidelines, and regulations.
