European Union: European Commission implementing decision on adequate level of protection of personal data by Brazil
Progress
Current status
under deliberation
04 Nov 2025 under deliberation
05 Sep 2025 under deliberation
Scope
Implementers
Austria
Belgium
Brazil
Bulgaria
Croatia
Cyprus
Czechia
Denmark
Estonia
Finland
France
Germany
Greece
Hungary
Ireland
Italy
Latvia
Lithuania
Luxembourg
Malta
Netherlands
Poland
Portugal
Romania
Slovakia
Slovenia
Spain
Sweden
Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
data protection authority
other regulatory body
Implementation Level
supranational
Timeline of events
European Data Protection Board adopted opinion on Commission draft implementing decision on adequate protection of personal data by Brazil
On 4 November 2025, the European Data Protection Board (EDPB) adopted Opinion 28/2025 regarding the European Commission draft implementing decision on Brazil’s adequacy. The opinion notes that Brazil’s General Data Protection Law (LGPD), related pre…
SourceEvent type
order
Action type
opinion
Government branch
executive
Government body
data protection authority
European Commission launched procedure on adequacy decision for personal data transfers with Brazil
On 5 September 2025, the European Commission launched the procedure towards the adoption of an adequacy decision with the Federative Republic of Brazil, determining that Brazil ensures an adequate level of protection for personal data that is essent…
SourceEvent type
order
Action type
drafting
Government branch
executive
Government body
other regulatory body