On July 9, 2019, Law n. 13.853/19 that creates the Brazilian
Data Protection Authority ("ANPD") and
modifies and consolidates Law 13.709/18
("LGPD") was enacted. Below are the main
modifications and vetoes brought by the Law:
1. Review of decisions taken solely
by automated processing of personal data.
A relevant vetoed provision was the one related to the possibility
of review by a natural person of decisions solely taken by the
automated processing of personal data. With the consolidated
wording of the LGPD, the review of decisions taken solely by
automated processing of personal data remains possible,
nonetheless, without the obligation of such review being
mandatorily conducted by a human being.