General Data Protection Law (LGPD): Understanding Data Protection in Brazil

In this course, students will understand the importance of Brazil's Law No. 13,709/2018 (LGPD) in protecting privacy and digital rights. Fundamental concepts will be covered, including personal data and sensitive data, highlighting the need for rigorous processing and specific consent for information that could lead to discrimination or impact human dignity.

The module presents the rights of data subjects, such as access, correction, anonymization, portability, and revocation of consent, as well as the definition of processing agents: controller, processor, and Data Protection Officer (DPO). Students will also study the 10 LGPD principles, such as purpose, adequacy, necessity, transparency, security, and accountability, which guide all data processing within organizations.

Finally, the obligations of companies and public agencies will be explored, including data flow mapping, security measures, training, and incident notification. Enforcement is carried out by the National Data Protection Authority (ANPD), with sanctions that can reach significant fines. The module emphasizes that LGPD compliance should be seen as a strategic cultural shift, fostering trust, competitive differentiation, and respect for society.