LGPD
Lei Geral de Proteção de Dados (Brazil)
South America's GDPR-style law - essential for websites that market to or track users in Brazil.
Quick navigation
LGPD
What it means
LGPD is often called South America's answer to GDPR. Brazil adapted much of the European framework to its own legal system, and it applies to personal data collected through websites, apps, cookies, and advertising tags.
If you run campaigns in Brazil or serve Brazilian visitors, consent flows should look familiar: clear information, meaningful choice before non-essential cookies, and records that prove what each visitor agreed to.
Brazil · South America
Who must comply
- You offer products or services to people in Brazil.
- You process personal data of individuals located in Brazil, including via cookies and analytics.
- You use advertising, retargeting, or behavioral measurement tools on Brazilian traffic.
LGPD
What you need to do
- Provide transparent notice about cookies and tracking technologies.
- Obtain valid consent before non-essential cookies where required.
- Document consent and preference changes with timestamps.
- Honor access, correction, and deletion rights for data subjects.
- Maintain vendor and processor agreements for shared data.
Plain language
What it is not
LGPD
FAQ
Is LGPD basically the same as GDPR?
They share many principles - transparency, lawful basis, consent, and data subject rights - but LGPD has its own authority (ANPD) and local enforcement context.
Do I need LGPD compliance for ads in Brazil?
If your site sets marketing or analytics cookies for Brazilian visitors, you should treat LGPD consent requirements seriously.
Does Permbot support LGPD-style consent?
Yes. Category-based consent, proof of consent, and preference updates align with how LGPD is implemented on modern websites.