The global data protection landscape continues to evolve, and
Brazil is the latest country to enact an omnibus law governing how
organizations collect, use, disclose and otherwise process personal
data. Beginning on February 15, 2020, Brazil's data protection
law, Lei Geral de Proteção de Dados (LGPD)
(unofficial English translation available here), will go into effect and require
companies to comply with strict requirements related to the
processing of personal data.
After years of debate and consultation, the Brazilian Federal
Senate approved a final version of the bill on July 10, 2018, which
was then sent to the president for review and signature. Although
the bill originally included provisions creating a national Data
Protection Authority (DPA) to oversee and enforce the law,
President Michel Temer vetoed this section before signing the LGPD
into law on August 12, 2018. According to the president, under
Brazilian law only the executive branch has authority to
