{"id":1852,"date":"2018-10-11T07:00:35","date_gmt":"2018-10-11T06:00:35","guid":{"rendered":"https:\/\/www.calligo.io\/data-privacy-news-brazils-new-general-data-protection-law\/"},"modified":"2023-05-01T19:30:23","modified_gmt":"2023-05-01T18:30:23","slug":"data-privacy-news-brazils-new-general-data-protection-law","status":"publish","type":"post","link":"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/","title":{"rendered":"Data Privacy News: Brazil\u2019s new General Data Protection Law"},"content":{"rendered":"<p>Back in August, Brazil approved its\u00a0<a href=\"https:\/\/calligo.cloud\/services\/data-privacy-services\/gdpr-services\/\">General Data Protection Law<\/a>\u00a0(or the LGPD, standing for the\u00a0<em>Lei Geral de Prote\u00e7\u00e3o de Dados Pessoais<\/em>\u00a0in Portugese). It will come into effect in early 2020, echoing the approximate timeframe of the\u00a0<a href=\"https:\/\/calligo.cloud\/services\/data-privacy-services\/gdpr-services\/\">GDPR\u2019s<\/a>\u00a0implementation period.<\/p>\n<p><!--more--><\/p>\n<p>In short, the LGPD is very similar to the GDPR. Not because of a copycat mentality, but because the GDPR is highly reflective of society\u2019s mindset and expectations, meaning most later legislation inevitably has similarities. There are however some interesting differences \u2013 some practical, others philosophical.<\/p>\n<p>Over the last couple of months, we have been examining the differences and nuances of the new legislation as we have already started advising our clients on its future ramifications. In the process, we have seen how and where the law has its most material impact. Those areas that have sparked the most conversation are listed below and will hopefully guide you in your own alignment with the law.<\/p>\n<p><strong>Non-discrimination as a new principle<\/strong><\/p>\n<p>In a slight departure from the GDPR, the LGPD adds the seemingly new principle of \u201cnon-discrimination\u201d. Its addition is important. Other universal principles largely cover personal data\u2019s structure, manner of storage or protection. The fact that it should not be used to discriminate for or against certain classes of individual has rarely been codified before.<\/p>\n<p>This said, the practical reality is that when we look at the types of discrimination that the LGPD prohibits, we see some familiar terms. Discrimination on the basis of sexuality, race, religion are all outlawed, but of course these are all types of data covered in the GDPR as \u201cSpecial Categories\u201d that require heightened protection. This means that while the GDPR may only mention the word \u201cdiscrimination\u201d twice, and not in the context of core principles, it is nonetheless addressed in the way it is built and enforced. That said, elevating non-discrimination to a core principle of privacy is appropriate, sensible and probably overdue.<\/p>\n<p><strong>Data Protection Officers<\/strong><\/p>\n<p>A noticeable difference between the two is in the area of Data Protection Officers (DPO). Many commentators have excitedly claimed that Brazil is now insisting that every company based in Brazil that handles personal data must have one. This is not strictly true. The term DPO is never used, and they are referred to instead as \u201cpersons in charge of privacy\u201d \u2013 a rather oblique term.<\/p>\n<p>But aside from picky semantics, there are some important differences with GDPR. Brazil requires the \u201cDPO\u201d (terminology used for the sake of ease) to be a natural person (i.e. a living human), whereas the GDPR allows the role to be assigned to a \u201clegal person\u201d, which may include a corporate or government entity.<\/p>\n<p>There are also differences in the precise responsibilities of the DPO. As would be expected, the LGPD requires a DPO to monitor the organisation\u2019s compliance and manage dialogue with data subjects and the statutory authority. But it does not include a general requirement to inform and advise the business of its obligations. This arguably devalues the role to a technical one, rather than a strategic consultant, perhaps leaving Brazilian businesses exposed to not fully considering the rights and sensitivities of their data subjects in their senior decision-making.<\/p>\n<p>Many have noted that the LGPD DPO also is not required to advise the business on or manage DPIAs. This is potentially because there isn\u2019t a Data Protection Authority in Brazil yet, so this responsibility may yet come as data privacy matures in the country and the Authority launches (presumably in good time for 2020).<\/p>\n<p>As a final point in DPOs, there is no requirement for a business based outside Brazil but that handles personal data on Brazilian citizens to appoint a DPO. In contrast, the GDPR does require such an appointment for non-EU companies handling EU personal data.<\/p>\n<p><strong>Penalties<\/strong><\/p>\n<p>The LGPD is not as punitive as the GDPR, both in sentiment and finance. The maximum fine under the LGPD is 2% of the company\u2019s Brazilian revenue up to R$50 million (just over E11 million) per infraction. This is compared to 4% of\u00a0<em>global<\/em>\u00a0revenue or up to E20 million under GDPR.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Brazil approved its General Data Protection Law (or the LGPD, standing for the Lei Geral de Prote\u00e7\u00e3o de Dados Pessoais in Portugese).<\/p>\n","protected":false},"author":33,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"post_format_type":[40],"class_list":["post-1852","post","type-post","status-publish","format-standard","hentry","category-blog"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Data Privacy News: Brazil\u2019s new General Data Protection Law | Calligo<\/title>\n<meta name=\"description\" content=\"Brazil approved its General Data Protection Law (or the LGPD, standing for the Lei Geral de Prote\u00e7\u00e3o de Dados Pessoais in Portugese).\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Data Privacy News: Brazil\u2019s new General Data Protection Law | Calligo\" \/>\n<meta property=\"og:description\" content=\"Brazil approved its General Data Protection Law (or the LGPD, standing for the Lei Geral de Prote\u00e7\u00e3o de Dados Pessoais in Portugese).\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/\" \/>\n<meta property=\"og:site_name\" content=\"Calligo\" \/>\n<meta property=\"article:published_time\" content=\"2018-10-11T06:00:35+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-01T18:30:23+00:00\" \/>\n<meta name=\"author\" content=\"Brendan Walsh\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@calligocloud\" \/>\n<meta name=\"twitter:site\" content=\"@calligocloud\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brendan Walsh\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/\"},\"author\":{\"name\":\"Brendan Walsh\",\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/person\/e2e0283a3e6c3a237a10e012c081755f\"},\"headline\":\"Data Privacy News: Brazil\u2019s new General Data Protection Law\",\"datePublished\":\"2018-10-11T06:00:35+00:00\",\"dateModified\":\"2023-05-01T18:30:23+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/\"},\"wordCount\":694,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.calligo.io\/#organization\"},\"articleSection\":[\"Blog\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/\",\"url\":\"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/\",\"name\":\"Data Privacy News: Brazil\u2019s new General Data Protection Law | Calligo\",\"isPartOf\":{\"@id\":\"https:\/\/www.calligo.io\/#website\"},\"datePublished\":\"2018-10-11T06:00:35+00:00\",\"dateModified\":\"2023-05-01T18:30:23+00:00\",\"description\":\"Brazil approved its General Data Protection Law (or the LGPD, standing for the Lei Geral de Prote\u00e7\u00e3o de Dados Pessoais in Portugese).\",\"breadcrumb\":{\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.calligo.io\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Data Privacy News: Brazil\u2019s new General Data Protection Law\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.calligo.io\/#website\",\"url\":\"https:\/\/www.calligo.io\/\",\"name\":\"Calligo\",\"description\":\"Building value through data\",\"publisher\":{\"@id\":\"https:\/\/www.calligo.io\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.calligo.io\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.calligo.io\/#organization\",\"name\":\"Calligo\",\"url\":\"https:\/\/www.calligo.io\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/calligo-og.jpg\",\"contentUrl\":\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/calligo-og.jpg\",\"width\":1200,\"height\":630,\"caption\":\"Calligo\"},\"image\":{\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/calligocloud\",\"https:\/\/www.linkedin.com\/company\/calligo-limited\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/person\/e2e0283a3e6c3a237a10e012c081755f\",\"name\":\"Brendan Walsh\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/299d5b23f0682aabb1a2347ddf8b95df04b22cfec378aea17a8f7395c74b2bc8?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/299d5b23f0682aabb1a2347ddf8b95df04b22cfec378aea17a8f7395c74b2bc8?s=96&d=mm&r=g\",\"caption\":\"Brendan Walsh\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Data Privacy News: Brazil\u2019s new General Data Protection Law | Calligo","description":"Brazil approved its General Data Protection Law (or the LGPD, standing for the Lei Geral de Prote\u00e7\u00e3o de Dados Pessoais in Portugese).","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/","og_locale":"en_GB","og_type":"article","og_title":"Data Privacy News: Brazil\u2019s new General Data Protection Law | Calligo","og_description":"Brazil approved its General Data Protection Law (or the LGPD, standing for the Lei Geral de Prote\u00e7\u00e3o de Dados Pessoais in Portugese).","og_url":"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/","og_site_name":"Calligo","article_published_time":"2018-10-11T06:00:35+00:00","article_modified_time":"2023-05-01T18:30:23+00:00","author":"Brendan Walsh","twitter_card":"summary_large_image","twitter_creator":"@calligocloud","twitter_site":"@calligocloud","twitter_misc":{"Written by":"Brendan Walsh","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/#article","isPartOf":{"@id":"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/"},"author":{"name":"Brendan Walsh","@id":"https:\/\/www.calligo.io\/#\/schema\/person\/e2e0283a3e6c3a237a10e012c081755f"},"headline":"Data Privacy News: Brazil\u2019s new General Data Protection Law","datePublished":"2018-10-11T06:00:35+00:00","dateModified":"2023-05-01T18:30:23+00:00","mainEntityOfPage":{"@id":"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/"},"wordCount":694,"commentCount":0,"publisher":{"@id":"https:\/\/www.calligo.io\/#organization"},"articleSection":["Blog"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/","url":"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/","name":"Data Privacy News: Brazil\u2019s new General Data Protection Law | Calligo","isPartOf":{"@id":"https:\/\/www.calligo.io\/#website"},"datePublished":"2018-10-11T06:00:35+00:00","dateModified":"2023-05-01T18:30:23+00:00","description":"Brazil approved its General Data Protection Law (or the LGPD, standing for the Lei Geral de Prote\u00e7\u00e3o de Dados Pessoais in Portugese).","breadcrumb":{"@id":"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-news-brazils-new-general-data-protection-law\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.calligo.io\/"},{"@type":"ListItem","position":2,"name":"Data Privacy News: Brazil\u2019s new General Data Protection Law"}]},{"@type":"WebSite","@id":"https:\/\/www.calligo.io\/#website","url":"https:\/\/www.calligo.io\/","name":"Calligo","description":"Building value through data","publisher":{"@id":"https:\/\/www.calligo.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.calligo.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.calligo.io\/#organization","name":"Calligo","url":"https:\/\/www.calligo.io\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.calligo.io\/#\/schema\/logo\/image\/","url":"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/calligo-og.jpg","contentUrl":"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/calligo-og.jpg","width":1200,"height":630,"caption":"Calligo"},"image":{"@id":"https:\/\/www.calligo.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/calligocloud","https:\/\/www.linkedin.com\/company\/calligo-limited\/"]},{"@type":"Person","@id":"https:\/\/www.calligo.io\/#\/schema\/person\/e2e0283a3e6c3a237a10e012c081755f","name":"Brendan Walsh","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.calligo.io\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/299d5b23f0682aabb1a2347ddf8b95df04b22cfec378aea17a8f7395c74b2bc8?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/299d5b23f0682aabb1a2347ddf8b95df04b22cfec378aea17a8f7395c74b2bc8?s=96&d=mm&r=g","caption":"Brendan Walsh"}}]}},"_links":{"self":[{"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/posts\/1852","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/users\/33"}],"replies":[{"embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/comments?post=1852"}],"version-history":[{"count":0,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/posts\/1852\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/media?parent=1852"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/categories?post=1852"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/tags?post=1852"},{"taxonomy":"post_format_type","embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/post_format_type?post=1852"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}