2018-08-14 | Lei 13.709/2018Added
The law establishes a comprehensive regime for the processing of personal data by natural persons and legal entities of public or private law, defining personal, sensitive, anonymized data and related concepts, and setting out the principles, lawful bases and consent requirements for processing. It creates the National Data Protection Authority (ANPD) with supervisory and enforcement powers, mandates impact reports, and grants data subjects rights such as access, correction, deletion, portability and revocation of consent. The provisions apply to any processing activity carried out on Brazilian territory or involving data collected in Brazil, with specific exemptions for purely private, journalistic, academic, public‑security and national‑defense purposes. The law entered into force on August 14, 2018 and has been amended by subsequent statutes (e.g., Laws No. 13,853/2019, No. 15,352/2026).
Get BR-LAW alerts — same-day email on every new publication.
General Secretariat
Sub‑Chief for Legal Affairs
Veto message
Effective
General Data Protection Law (LGPD). (Text as amended by Law No. 13,853, 2019)
Effective
THE PRESIDENT OF THE REPUBLIC
I make known that the National Congress decrees and I sanction the following Law:
Art. 1 This Law provides for the processing of personal data, including in digital media, by natural persons or by legal entities of public or private law, with the aim of protecting the fundamental rights of liberty and privacy and the free development of the personality of the natural person.
Read the rest free, and get an email when BR-LAW publishes again
Source: Congresso Nacional do Brasil — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
More like this from BR-LAW
We email you every new BR-LAW publication the day it's published.