LGPD (Brazil’s General Data Protection Law)
Brazil’s personal data protection law, closely modelled on the GDPR, in force since 2020 and supervised by the ANPD.
The LGPD (Law 13,709/2018) is Brazil's general data protection law, in force since 2020 with penalties applicable since 2021. It closely resembles the GDPR: lawful bases for processing, data subject rights, a data protection officer ("encarregado"), impact assessments and incident notification.
It is especially relevant to AI because of Article 20, which gives people the right to request review of decisions made solely through automated processing that affect their interests, and to receive information about the criteria used.
The authority is the ANPD. Fines can reach 2% of revenue in Brazil, capped at 50 million reais per infringement.
Track updates: news for every country, with date and source, in our Regulatory Radar.
Reference: Ley 13.709/2018 (Brasil)
Related terms
Take the free assessment and find out in a few minutes which obligations your company has and where to start.
← Back to the glossaryUpdated: October 2026 · Informational content, not legal advice.