LGPD (Lei Geral de Proteção de Dados)

The LGPD is Brazil's comprehensive privacy regulation. It mirrors GDPR's foundational structure — lawful basis, rights of data subjects, breach notification — and is enforced by the Autoridade Nacional de Proteção de Dados (ANPD). It applies to any entity processing data of individuals in Brazil regardless of where the entity is based.

Offshore hosts targeting Brazilian customers should publish an LGPD-aligned Privacy Policy and maintain a Brazilian representative if they meet processing thresholds. Most operators handle this by extending their GDPR documentation to cover LGPD's specific requirements (e.g. ANPD as the supervisory authority instead of an EU member state DPA).