Progress

Current status
in force
01 Aug 2021in force
18 Sep 2020in grace period
14 Aug 2018adopted
29 May 2018under deliberation

Scope

Implementers
Brazil
Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Government Branch
legislature
Government Body
parliament
Implementation Level
national

Timeline of events

01 Aug 2021
in force

Implemented General Data Protection Law (LGPD) including data transfer regulations

After an initial grace period, the Brazilian data protection law (Lei N° 13.709) is fully implemented and can be enforced by the Brazilian courts and responsible agencies, with the possibility to apply the penalties contained in the law. The Law uni…

Event typelaw
Action typeimplementation
Government branchlegislature
Government bodyparliament
18 Sep 2020
in grace period

Entry into force with grace period of General Data Protection Law (LGPD) including data transfer regulations

The comprehensive Brazilian data protection law (Lei N° 13.709) enters into force with a grace period. The Law unifies over 40 different statutes governing personal data protection and establishes the National Data Protection Authority as the main …

Event typelaw
Action typein force with grace period
Government branchlegislature
Government bodyparliament
14 Aug 2018
adopted

Adopted General Data Protection Law (LGPD) including data transfer regulations

The Brazilian data protection law (Lei N° 13.709) is adopted by the Brazilian Parliament. The Law unifies over 40 different statutes governing personal data protection and establishes the National Data Protection Authority as the main enforcer. More…

Event typelaw
Action typeadoption
Government branchlegislature
Government bodyparliament
29 May 2018
under deliberation

Introduced General Data Protection Law (LGPD) including data transfer regulations

On 29 May 2018, the comprehensive Brazilian data protection law is introduced to the parliament. The Law unifies over 40 different statutes governing personal data protection and establishes the National Data Protection Authority as the main enforce…

Event typelaw
Action typeintroduction
Government branchlegislature
Government bodyparliament