Brazilian Data Protection Authority (ANPD) issues new international data transfer regulation
The International Data Transfer Regulation, published in August 2024 by the Brazilian Data Protection Authority (ANPD), has brought significant changes to companies that transfer personal data abroad. The new regulation outlines several mechanisms to authorize cross-border data transfers under the Brazilian Data Protection Law (LGPD), including adequacy decisions, standard contractual clauses, among others. The ANPD […]
Public Civil Actions in data privacy breaches
Class actions are used in various jurisdictions as a key mechanism for the protection of collective rights. The Brazilian legal action that most closely resembles class actions in the USA is the Public Civil Action (ACP), which has served over the years as the primary tool for protecting personal data in Brazil. Before the LGPD […]