Brazil: Regulation of cross-border transfers of personal data and model of standard contractual clauses
Progress
Scope
Timeline of events
National Data Protection Authority regulation on cross-border personal data transfers and standard contractual clauses (CD/ANPD No. 19) was fully implemented
On 23 August 2025, the transitional period established under Resolution CD/National Data Protection Authority (ANPD) No. 19 expired, requiring all data processing agents relying on contractual clauses for international transfers to have incorporated…
SourceNational Data Protection Authority regulation on cross-border personal data transfers and standard contractual clauses (CD/ANPD No. 19) entered into force, with a 12-month grace period for contractual clauses
On 23 August 2024, the Brazilian National Data Protection Authority (ANPD) published Resolution CD/ANPD No. 19, which approved and implemented the International Data Transfer Regulation and the standard contractual clauses. A transitional provision …
SourceClosed consultation on regulation of cross-border personal data transfers and standard contractual clauses
On 14 September 2023, the Brazilian Data Protection Authority (ANPD) closed a consultation on the regulation of cross-border personal data transfers and standard contractual clauses. The regulation aims to establish mechanisms for the cross-border t…
SourceOpened consultation on regulation of cross-border personal data transfers and standard contractual clauses
On 15 August 2023, the Brazilian Data Protection Authority (ANPD) opened a consultation on the regulation of cross-border personal data transfers and standard contractual clauses until 14 September 2023. The regulation aims to establish mechanisms f…
Source