Skip to content

LGPD

What is LGPD?

Brazil's General Data Protection Law (Lei Geral de Protecao de Dados) that regulates the processing of personal data of individuals in Brazil.

Privacy and Data Protection

Each of these is named in at least one of the same controls as lgpd. The number is how many controls name both.

What the standards actually require on lgpd

Requirements naming lgpd across 6 standards, quoted from the control text.

LGPD8 controls

Brazil LGPD Articles 33-36 International Data Transfer (Transferencia Internacional). Transfer of personal data outside Brazil permitted only where: (I) destination jurisdiction provides adequate level of protection (ANPD assessment - automatic recognition pen...

LGPD-BR-Cross-Border-International-Transfer-Article-33-Adequacy-SCC-BCR-ANPD-Approval-Mercosur-RIPD · Brazil LGPD Cross-Border + Article 33 + Adequacy + SCC + BCR + Mercosur + RIPD

Personal data treatment. Article 34 makes the institutions responsible for treating personal data in accordance with the General Data Protection Law (LGPD).

BR-OF-A34 · Personal data treatment (LGPD)

Global CBPR Forum 2024-2025 status + pipeline. UK ACCESSION 2024: United Kingdom acceded April 2024 + first non-APEC member; ICO + DSIT signed accession; first wave of UK-certified Accountability Agents accredited;

CBPR-2024-2025-UK-NewJurisdictions-AI-PEP · Global CBPR Forum: 2024-2025 Update Pipeline - UK 2024, AI Integration, PEP, ASEAN MCC

Coordination positions INCDPA within the broader US and international privacy regulatory landscape. (1) US State Privacy Law Patchwork: 20+ comprehensive US state privacy laws as of 2026 (California CCPA/CPRA + Virginia VCDPA + Colorado CPA + Utah UCPA + Conne...

INCDPA-Coord-USStatePrivacy-VCDPA-CPA-CTDPA-CCPA-Federal-FTC-DPDP-GDPR-International · Indiana CDPA Coordination - US State Privacy Laws (Virginia/Colorado/Connecticut/Utah/Texas/Iowa+) + Federal Sectoral (HIPAA/GLBA/FCRA/FERPA/COPPA) + FTC Section 5 + GDPR + India DPDP + International Privacy Frameworks

Training + awareness + coordination operationalise UU PDP within Indonesia and across the regional + global regulatory landscape. Training and Awareness: mandatory cyber + privacy awareness training for all staff + role-specific training for IT + security + ex...

IDPdp-Training-Awareness-Coord-ASEAN-SingaporePDPA-APEC-CBPR-GDPR-Art70to76-MoCom-Transition · Indonesia PDP Training + Awareness + Indonesian Representative + Lembaga PDP Transition + Coordination ASEAN/Singapore PDPA/APEC CBPR/GDPR/India DPDP/Cross-Sectoral OJK/BI/BSSN

Questions people ask about lgpd

What is LGPD?
Brazil's General Data Protection Law (Lei Geral de Protecao de Dados) that regulates the processing of personal data of individuals in Brazil.
Why is LGPD important for compliance?
LGPD is a key concept in Privacy and Data Protection. Understanding lgpd helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address LGPD?
LGPD appears in the requirement text of LGPD, Brazil Open Finance (Resolução Conjunta No. 1/2020), Global Cross-Border Privacy Rules (Global CBPR) Forum, ITU-T X.805 - Security Architecture for End-to-End Communications, Indiana Consumer Data Protection Act. Across these standards we have identified 13 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about LGPD?
Explore our compliance framework pages to see how lgpd applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how LGPD applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.