LGPD

Brazil's general data protection law, closely modeled on the GDPR. It applies to any organization processing personal data of people in Brazil, grants individuals rights over their data, and requires a legal basis for processing. Brazil's national data protection authority, the ANPD, enforces it with fines of up to 2 percent of Brazilian revenue.