2018-08-14 | Lei 13.709/2018

Added

Law No. 13,709, of August 14, 2018 — General Data Protection Law (LGPD)

The law establishes a comprehensive regime for the processing of personal data by natural persons and legal entities of public or private law, defining personal, sensitive, anonymized data and related concepts, and setting out the principles, lawful bases and consent requirements for processing. It creates the National Data Protection Authority (ANPD) with supervisory and enforcement powers, mandates impact reports, and grants data subjects rights such as access, correction, deletion, portability and revocation of consent. The provisions apply to any processing activity carried out on Brazilian territory or involving data collected in Brazil, with specific exemptions for purely private, journalistic, academic, public‑security and national‑defense purposes. The law entered into force on August 14, 2018 and has been amended by subsequent statutes (e.g., Laws No. 13,853/2019, No. 15,352/2026).

Congresso Nacional do Brasil logo

Brazil

Congresso Nacional do Brasil

Scan of the document's first page
Share

Get BR-LAW alerts — same-day email on every new publication.

Read the rest free, and get an email when BR-LAW publishes again

Lineage: In force

Law No. 12965 dated 2014-04-23not in RegAlertLaw No. 13853 of 2019not in RegAlertLaw No. 14010 of 2020not in RegAlertLaw No. 14460 of 2022not in RegAlertLaw No. 15352 of 2026not in RegAlertLaw No. 13,709, of August 14,2018 — General Data Protectio…2018-08-14 · this documentResolution CMN No. 4,935 — Disp…2021BCB Resolution No. 366 — Publis…2024BCB Resolution No. 536 — Establ…2025Resolution BCB No. 537 Constitu…2025BCB Normative Instruction No. 7…2026Central Bank Instruction No. 72…2026Normative Instruction BCB No. 7…2026Resolution BCB No. 124 — Establ…2021Normative Instruction BCB No. 6…2025
amendssupersedesissued underrefers toproposed or not in RegAlertarrows run from the older text to the one that changes it

Source: Congresso Nacional do Brasil — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works

More like this from BR-LAW

We email you every new BR-LAW publication the day it's published.

Topics
privacy