The General Data Protection Law in Brazil: What Comes Next?

Abstract

The Brazilian Data Protection Law (LGPD) will enter into force in August 2020. Brazil was one of the few countries among the major global economies not to have a regulatory framework for personal data protection, which means, it was a minor player in the subject with sparse regulations such as the Civil Rights Framework for the Internet, Civil Code and the Consumer Protection Code. The cultural change to be imposed by LGPD can be noticed by the principles that give legal grounds to the law. With around ten general principles, including purpose, necessity, open access, transparency, security, liability and accountability, which are particularly emphasized, LGPD aims to rebalance the games of power, increase transparency, responsiveness and empower the subjects of personal data in their interactions in cyberspace. Data Protection, cybersecurity, data subjects, LGPD, GDPR, Brazil