LGPD

Lei Geral de Proteção de Dados (Brazil)

In force privacy

WhenIn effect since 18 September 2020

Who enforces itAutoridade Nacional de Proteção de Dados (ANPD)

Who it applies toOrganizations processing personal data in Brazil or of people in Brazil.

Tell the regulatorNotify ANPD within 3 business days of learning an incident affected personal data and may caus… DPO requiredControllers must appoint an encarregado RegistrationNot addressed Transfers abroadTransfers allowed via adequacy, ANPD standard clauses (mandatory since Aug 2025), ANPD-approve… Request deadlineFull access response within 15 days of the request Maximum fineSimple fine up to 2% of Brazil revenue for the prior year, capped at BRL 50 million per infrac…

Recent developments

28 Aug 2026 Proposed Regulation proposed Low 34 BR

EFF and allies recommend new privacy safeguards to protect Brazil's electoral integrity

The recommendations aim to use privacy law enforcement to reduce manipulative political content and protect democratic processes. The Electronic Frontier Foundation, Access Now and Data Privacy Brasil issued recommendations urging stronger personal data protection in Brazil's elections. They call for prohibiting processing of sensitive political data, requiring explicit consent, and disabling political micro‑targeting tools.

Source: EFF updates. LGPD in the regulations library.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the map Follow Regulatory Watch

In force
Coming into force
Sector laws

AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL

Recent developments

EFF and allies recommend new privacy safeguards to protect Brazil's electoral integrity

Every US state privacy law, on one map