European Union: European Commission implementing decision on adequate level of protection of personal data by Brazil
Progress
Scope
Timeline of events
Commission implementing decision on the adequate level of protection of personal data by Brazil enters into force
On 28 January 2026, the European Commission’s implementing decision recognising that Brazil ensures an adequate level of protection for personal data under the EU General Data Protection Regulation (GDPR) enters into force. The decision confirms tha…
SourceEuropean Commission adopted implementing decision on adequate level of protection of personal data by Brazil
On 26 January 2026, the European Commission adopted an implementing decision recognising that Brazil ensures an adequate level of protection for personal data under the General Data Protection Regulation (GDPR), while Brazil adopted a corresponding …
SourceEuropean Data Protection Board adopted opinion on Commission draft implementing decision on adequate protection of personal data by Brazil
On 4 November 2025, the European Data Protection Board (EDPB) adopted Opinion 28/2025 regarding the European Commission draft implementing decision on Brazil’s adequacy. The opinion notes that Brazil’s General Data Protection Law (LGPD), related pre…
SourceEuropean Commission launched procedure on adequacy decision for personal data transfers with Brazil
On 5 September 2025, the European Commission launched the procedure towards the adoption of an adequacy decision with the Federative Republic of Brazil, determining that Brazil ensures an adequate level of protection for personal data that is essent…
Source