Brazilian Data Protection Authority (ANPD) issues new international data transfer regulation
The International Data Transfer Regulation, published in August 2024 by the Brazilian Data Protection Authority (ANPD), has brought significant changes to companies that transfer personal data abroad. The new regulation outlines several mechanisms to authorize cross-border data transfers under the Brazilian Data Protection Law (LGPD), including adequacy decisions, standard contractual clauses, among others. The ANPD […]
Brazilian Data Protection Authority’s (ANPD) first penalty for non-compliance with the Brazilian General Data Protection Law (LGPD)
Last July 6th, the ANPD ruled the first case of LGPD violation. The wrongdoer, which is a microenterprise, was fined in the amount of BRL 14,400 for offering to political candidates a database with voters’ personal data (including name, telephone number and address). According to the decision, the Brazilian company was processing personal data with no legal […]
The role of the Brazilian Data Protection Authority in cross-border data transfers
After a turbulent legislative process, the Brazilian Data Protection Authority (ANPD) was finally created in July 2019. However, the watchdog was unusually designed as a transitory unit within the current structure of the Presidency of the Republic with no specific workforce or budget. Within two years it may be converted into a special authority, such […]