Artifact GuideBrazilChecklist

Brazil LGPD Checklist

Use this checklist to validate notices, controls, workflows, records, and escalation points before go-live, periodic reviews, or enforcement preparation.

Use this section to define scope, owner, evidence inputs, and the review outcome before execution.

Back to main artifact Review sources

Author

Sorena AI

Published

May 9, 2026

Updated

May 9, 2026

Sections

Structured answer sets in this page tree.

Primary sources

Cited legal and guidance references.

Publication metadata

Sorena AI

Published May 9, 2026

Updated May 9, 2026

Overview

Use this page to turn the LGPD into a practical checklist for product, legal, privacy, security, and compliance teams. It helps you confirm the trigger, owner, deadline, evidence, and review path before go-live or periodic review.

Section 1

How should a Checklist workflow run under the Brazil LGPD?

Run the workflow as LGPD processing triage: role, purpose, lawful basis, data category, right/transfer/incident trigger, required action, evidence, and DPO review.

Capture the request, product, role, data flow, jurisdiction, and deadline.
Check the source-linked rule and route exceptions before implementation.
Record the action taken, owner, reviewer, evidence location, and next review date.
Keep a plain-language output that support, product, legal, security, and compliance teams can all understand.

Sources for this answer

LEI Nº 13.709, DE 14 DE AGOSTO DE 2018

Primary LGPD source for checklist fields such as role, purpose, lawful basis, data category, rights handling, security, and accountability evidence.

PORTARIA ANPD N° 35, DE 4 DE NOVEMBRO DE 2022

ANPD internal-regulation source used to route checklist escalation, authority ownership, and governance review steps.

RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023

ANPD sanctions-regulation source used to connect checklist gaps with enforcement-risk and remediation evidence.

Section 2

What fields should the Brazil LGPD checklist template capture?

A useful template captures role, purpose, lawful basis, data subject, category, transfer or incident trigger, owner, evidence, and ANPD/DPO escalation note.

Source URL and source quote.
Entity, product, service, system, data category, and user group.
Decision result, control action, owner, reviewer, due date, and escalation reason.
Evidence attachment, approval note, exception note, and review cadence.

Sources for this answer

PORTARIA ANPD N° 35, DE 4 DE NOVEMBRO DE 2022

ANPD internal-regulation source used to route checklist escalation, authority ownership, and governance review steps.

RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023

ANPD sanctions-regulation source used to connect checklist gaps with enforcement-risk and remediation evidence.

Resolução CD/ANPD nº 2, de 27 de janeiro de 2022

ANPD small-processing-agent regulation for simplified processing records and essential security measures under the LGPD.

Section 3

How should teams review and improve the Brazil LGPD checklist workflow?

Review the workflow after ANPD guidance, new vendors, new purposes, cross-border changes, incidents, complaints, or changes to data-subject channels.

Track recurring exception categories and update intake questions.
Remove fields that never affect the decision.
Add fields when reviews show missing source evidence or unclear ownership.
Confirm generated markdown and page content include the same visible source-linked guidance.

Sources for this answer

LEI Nº 13.709, DE 14 DE AGOSTO DE 2018

Primary LGPD source for checklist fields such as role, purpose, lawful basis, data category, rights handling, security, and accountability evidence.

PORTARIA ANPD N° 35, DE 4 DE NOVEMBRO DE 2022

ANPD internal-regulation source used to route checklist escalation, authority ownership, and governance review steps.

RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023

ANPD sanctions-regulation source used to connect checklist gaps with enforcement-risk and remediation evidence.

GUIA ORIENTATIVO SOBRE SEGURANÇA DA INFORMAÇÃO PARA AGENTES DE TRATAMENTO DE PEQUENO PORTE

Official ANPD guide for practical security controls and checklist evidence for small processing agents under the LGPD.

Recommended next step