All regulations
Brazil

Brazil LGPD

Brazil's General Data Protection Law, in force since 2020. Applies to any AI system processing personal data of individuals in Brazil, including automated decision-making and a right to explanation and human review.

Who it applies to

  • Any organisation processing personal data of individuals in Brazil
  • AI systems making automated decisions about Brazilian data subjects
  • Controllers, processors and DPO-designated entities

Core obligations

  • Establish a legal basis for processing personal data
  • Enable data subject rights, including explanation and review
  • Maintain records of processing activities
  • Report incidents to the ANPD and affected individuals

How Vigil24 helps

  • Flags AI tools processing Brazilian personal data
  • Tracks explanation and human-review controls
  • Produces ANPD-ready incident and processing evidence