Brazilian General Data Protection Law

Effective on January 1, 2024

The Lei Geral de Proteção de Dados (LGPD), which came into effect in September 2020, is a new Brazilian privacy law similar to the GDPR, with enforcement beginning in August 2021. It regulates the collection, use, processing, storage, and transfer of personal data.

The LGPD aims to strengthen the security and protection of personal data in Brazil. It is designed to provide organizations with a consistent framework for the collection, processing, use, and sharing of personal data within Brazil. The LGPD grants individuals greater control over how their personal data is processed.

The LGPD applies to any public or private individual or business involved in the processing of personal data (collection, use, processing, storage, and transfer) in Brazil, regardless of the company's location.

The LGPD also applies to all individuals who possess personal data collected while in Brazil.

The LGPD does not apply to data processing by a person who processes data for personal purposes, or for journalistic, artistic, literary, or academic purposes, or for national security, national defense, public safety, or a criminal investigation.

Lobox users or external users have the right under the LGPD to perform the following actions:

  • Access your personal information

  • Correct errors in your personal data

  • Delete your personal data

  • Object to the processing of your personal data

  • Transfer your personal data

More information on how to exercise these rights is available here. You can contact the Lobox Data Protection Officer regarding this matter.