Choosing consent as a standard legal ground for processing personal data can be misleading
As from August 2020, every company processing data in the Brazilian territory or offering goods or services to individuals in Brazil, must comply with the recently enacted General Data Protection Law (LGPD). Unlike the European Union, where a regulation on data privacy – Directive 95/94/EC – was in force even before the General Data Protection […]
The role of the Brazilian Data Protection Authority in cross-border data transfers
After a turbulent legislative process, the Brazilian Data Protection Authority (ANPD) was finally created in July 2019. However, the watchdog was unusually designed as a transitory unit within the current structure of the Presidency of the Republic with no specific workforce or budget. Within two years it may be converted into a special authority, such […]