Brazil: National Data Protection Authority regulation on cross-border personal data transfers and standard contractual clauses (CD/ANPD No. 19) entered into force, with a 12-month grace period for contractual clauses
National Data Protection Authority regulation on cross-border personal data transfers and standard contractual clauses (CD/ANPD No. 19) entered into force, with a 12-month grace period for contractual clauses
On 23 August 2024, the Brazilian National Data Protection Authority (ANPD) published Resolution CD/ANPD No. 19, which approved and implemented the International Data Transfer Regulation and the standard contractual clauses. A transitional provision …
Scope
Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
data protection authority
Complete timeline of this policy change
Hide details
2023-08-15
in consultation
On 15 August 2023, the Brazilian Data Protection Authority (ANPD) opened a consultation on the regu…
2023-09-14
processing consultation
On 14 September 2023, the Brazilian Data Protection Authority (ANPD) closed a consultation on the r…
2024-08-23
in grace period
On 23 August 2024, the Brazilian National Data Protection Authority (ANPD) published Resolution CD/…
2025-08-23
in force
On 23 August 2025, the transitional period established under Resolution CD/National Data Protection…