LGPD
LGPD (Brazil) Data Protection Readiness Checklist
An LGPD checklist for legal bases, DPO (encarregado), rights, and ANPD incident expectations.
- Estimated time
- 2–5 Months
- Audience
- Companies Processing Personal Data of Individuals in Brazil
- Last updated
Operational reference for LGPD readiness. ANPD guidance and Brazilian counsel determine legal positions.
Progress is saved in this browser only. Nothing is sent to a server.
Phase 1: Mapping
Phase 2: Rights & Notices
Phase 3: Security & Incidents
Phase 4: Governance
FAQ
Is LGPD the same as GDPR?+–
Similar principles, different bases, DPO rules, and regulator (ANPD).
Do we need a local DPO?+–
LGPD requires an encarregado; appointment details follow ANPD guidance.
Does GDPR paperwork suffice?+–
It is a start. Relabeling is not enough—map LGPD-specific bases and rights.
Who enforces?+–
The Autoridade Nacional de Proteção de Dados (ANPD).
Related field notes
The checklists and field notes provided on this website are for educational and informational purposes only. They do not constitute legal, financial, or professional advice. Completing a checklist does not guarantee compliance, certification, or immunity from audits. Always consult with a certified auditor or legal counsel for your specific organizational needs. Full disclaimer