--- title: "Brazil LGPD Checklist" canonical_url: "https://www.sorena.io/artifacts/latam/brazil-lgpd/checklist" source_url: "https://www.sorena.io/artifacts/latam/brazil-lgpd/checklist" author: "Sorena AI" description: "Practical guidance for the Brazil LGPD checklist, with practical decisions, evidence, edge cases, and external source citations." published_at: "2026-05-09" updated_at: "2026-05-09" keywords: - "Brazil LGPD" - "Checklist" - "Brazil LGPD Checklist" - "compliance Checklist" - "practical guidance" - "Compliance" - "Regulatory guidance" --- **[SORENA](https://www.sorena.io/)** - AI-Powered GRC Platform [Home](https://www.sorena.io/) | [Solutions](https://www.sorena.io/solutions) | [Artifacts](https://www.sorena.io/artifacts) | [About Us](https://www.sorena.io/about-us) | [Contact](https://www.sorena.io/contact) | [Portal](https://app.sorena.io) --- # Brazil LGPD Checklist Practical guidance for the Brazil LGPD checklist, with practical decisions, evidence, edge cases, and external source citations. *Artifact Guide* *Brazil* *Checklist* ## Brazil LGPD Checklist This checklist helps validate notices, controls, workflows, records, and escalation points before go-live, periodic reviews, or enforcement preparation. This section defines scope, owner, evidence inputs, and the review outcome before execution. This page helps turn the LGPD into a practical checklist for product, legal, privacy, security, and compliance teams. It helps you confirm the trigger, owner, deadline, evidence, and review path before go-live or periodic review. ## How should a Checklist workflow run under the Brazil LGPD? Run the workflow as LGPD processing triage: territorial link, controller and operator roles, purpose, Article 7 or 11 basis, data category, rights, security, transfer or incident trigger, required action, evidence, and accountable review. - Capture the request, product, role, data flow, jurisdiction, and deadline. - Check the cited rule and route exceptions before implementation. - Record the action taken, owner, reviewer, evidence location, and next review date. - Keep a plain-language output that support, product, legal, security, and compliance teams can all understand. Sources for this answer: - [LEI Nº 13.709, DE 14 DE AGOSTO DE 2018](https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm?ref=sorena.io) - Primary LGPD source for checklist fields such as role, purpose, lawful basis, data category, rights handling, security, and accountability evidence. - [RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023](https://www.in.gov.br/web/dou/-/resolucao-cd/ANPD-n-4-de-24-de-fevereiro-de-2023-466146077?ref=sorena.io) - ANPD sanctions-regulation source used to connect checklist gaps with enforcement-risk and remediation evidence. ## What fields should the Brazil LGPD checklist template capture? A useful template captures role, purpose, lawful basis, data subject, category, transfer or incident trigger, owner, evidence, and ANPD/DPO escalation note. - Source URL and source quote. - Entity, product, service, system, data category, and user group. - Decision result, control action, owner, reviewer, due date, and escalation reason. - Evidence attachment, approval note, exception note, and review cadence. Sources for this answer: - [RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023](https://www.in.gov.br/web/dou/-/resolucao-cd/ANPD-n-4-de-24-de-fevereiro-de-2023-466146077?ref=sorena.io) - ANPD sanctions-regulation source used to connect checklist gaps with enforcement-risk and remediation evidence. - [Resolução CD/ANPD nº 2, de 27 de janeiro de 2022](https://www.gov.br/anpd/pt-br/acesso-a-informacao/institucional/atos-normativos/regulamentacoes_anpd/resolucao-cd-anpd-no-2-de-27-de-janeiro-de-2022?ref=sorena.io) - ANPD small-processing-agent regulation for simplified processing records and essential security measures under the LGPD. ## How should teams review and improve the Brazil LGPD checklist workflow? Review the workflow after ANPD guidance, new vendors, new purposes, cross-border changes, incidents, complaints, or changes to data-subject channels. - Track recurring exception categories and update intake questions. - Remove fields that never affect the decision. - Add fields when reviews show missing source evidence or unclear ownership. - Confirm the published page and markdown export show the same cited guidance. Sources for this answer: - [LEI Nº 13.709, DE 14 DE AGOSTO DE 2018](https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm?ref=sorena.io) - Primary LGPD source for checklist fields such as role, purpose, lawful basis, data category, rights handling, security, and accountability evidence. - [RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023](https://www.in.gov.br/web/dou/-/resolucao-cd/ANPD-n-4-de-24-de-fevereiro-de-2023-466146077?ref=sorena.io) - ANPD sanctions-regulation source used to connect checklist gaps with enforcement-risk and remediation evidence. - [GUIA ORIENTATIVO SOBRE SEGURANÇA DA INFORMAÇÃO PARA AGENTES DE TRATAMENTO DE PEQUENO PORTE](https://www.gov.br/anpd/pt-br/centrais-de-conteudo/materiais-educativos-e-publicacoes/guia-vf.pdf?ref=sorena.io) - Official ANPD guide for practical security controls and checklist evidence for small processing agents under the LGPD. *Recommended next step* *Placement: after the practical guidance* ## Turn Brazil LGPD Checklist into assigned work This artifact page provides practical inputs, owner roles, required outputs, and evidence checkpoints for checklist. - [Open Assessment Autopilot for Brazil LGPD](/solutions/assessment.md): Turn Checklist into scoped questions, evidence fields, and review tasks. - [Review Brazil LGPD source evidence](/solutions/research-copilot.md): Use Research Copilot to answer follow-up questions with cited source material. - [Talk through implementation](/contact.md): Review scope, evidence, owners, and the next compliance actions with operational practice. ## Primary sources - [LEI Nº 13.709, DE 14 DE AGOSTO DE 2018](https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm?ref=sorena.io) - Primary LGPD source for checklist fields such as role, purpose, lawful basis, data category, rights handling, security, and accountability evidence. - Quote: "Esta Lei dispõe sobre o tratamento de dados pessoais, inclusive nos meios digitais, por pessoa natural ou por pessoa jurídica." - [RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023](https://www.in.gov.br/web/dou/-/resolucao-cd/ANPD-n-4-de-24-de-fevereiro-de-2023-466146077?ref=sorena.io) - ANPD sanctions-regulation source used to connect checklist gaps with enforcement-risk and remediation evidence. - Quote: "aprova o Regulamento de Dosimetria e Aplicação de Sanções Administrativas." - [GUIA ORIENTATIVO SOBRE SEGURANÇA DA INFORMAÇÃO PARA AGENTES DE TRATAMENTO DE PEQUENO PORTE](https://www.gov.br/anpd/pt-br/centrais-de-conteudo/materiais-educativos-e-publicacoes/guia-vf.pdf?ref=sorena.io) - Official ANPD guide for practical security controls and checklist evidence for small processing agents under the LGPD. - Quote: "medidas administrativas e técnicas de segurança da informação" - [RESOLUÇÃO CD/ANPD Nº 1, DE 28 DE OUTUBRO DE 2021](https://in.gov.br/web/dou/-/resolucao-cd/ANPD-n-1-de-28-de-outubro-de-2021-358517513?ref=sorena.io) - ANPD procedural-regulation source for handling data-subject requests and authority-facing process records. - Quote: "Seção III Do Recebimento de Requerimentos [FOOTER/URL] Page 7/14 RESOLUÇÃO CD/ANPD Nº 1, DE 28 DE OUTUBRO DE" ## Related Topic Guides - [Brazil LGPD ANPD Enforcement and Fines Guide](/artifacts/latam/brazil-lgpd/anpd-enforcement-and-fines.md): Brazil LGPD guidance for ANPD Enforcement and Fines, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Applicability Test Guide](/artifacts/latam/brazil-lgpd/applicability-test.md): Practical guidance for the Brazil LGPD applicability test, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Breach Notification Guide](/artifacts/latam/brazil-lgpd/breach-notification.md): Brazil LGPD guidance for Breach Notification, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Compliance Guide](/artifacts/latam/brazil-lgpd/compliance.md): Practical guidance for the Brazil LGPD compliance, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Controller Operator and DPO Roles Guide](/artifacts/latam/brazil-lgpd/controller-operator-and-dpo-roles.md): Brazil LGPD guidance for Controller Operator and DPO Roles, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Data Subject Rights Guide](/artifacts/latam/brazil-lgpd/data-subject-rights.md): Brazil LGPD guidance for Data Subject Rights, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Deadlines and Compliance Calendar Guide](/artifacts/latam/brazil-lgpd/deadlines-and-compliance-calendar.md): Brazil LGPD guidance for Deadlines and Compliance Calendar, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD DSAR Response Template Guide](/artifacts/latam/brazil-lgpd/lgpd-dsar-response-template.md): Brazil LGPD guidance for LGPD DSAR Response Template, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD DSAR Workflow Guide](/artifacts/latam/brazil-lgpd/dsar-workflow.md): Brazil LGPD guidance for DSAR Workflow, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Incident Reporting to ANPD Guide](/artifacts/latam/brazil-lgpd/incident-reporting-to-anpd.md): Brazil LGPD guidance for Incident Reporting to ANPD, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Incident Workflow Guide](/artifacts/latam/brazil-lgpd/incident-workflow.md): Brazil LGPD guidance for Incident Workflow, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD International Transfer Mechanisms Guide](/artifacts/latam/brazil-lgpd/international-transfer-mechanisms.md): Brazil LGPD guidance for International Transfer Mechanisms, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD International Transfers Guide](/artifacts/latam/brazil-lgpd/international-transfers.md): Brazil LGPD guidance for International Transfers, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Lawful Bases Guide](/artifacts/latam/brazil-lgpd/lawful-bases.md): Brazil LGPD guidance for Lawful Bases, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Legal Bases and Legitimate Interest Balancing Guide](/artifacts/latam/brazil-lgpd/legal-bases-and-legitimate-interest-balancing.md): Brazil LGPD guidance for Legal Bases and Legitimate Interest Balancing, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD penalties and fines Guide](/artifacts/latam/brazil-lgpd/penalties-and-fines.md): Brazil LGPD guidance for penalties and fines, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Privacy Law FAQ](/artifacts/latam/brazil-lgpd/faq.md): Practical guidance for the Brazil LGPD FAQ, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Requirements Guide](/artifacts/latam/brazil-lgpd/requirements.md): Practical guidance for the Brazil LGPD requirements, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD RIPD and DPIA Evidence Guide](/artifacts/latam/brazil-lgpd/ripd-and-dpia-evidence.md): Brazil LGPD guidance for RIPD and DPIA Evidence, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD RIPD Workflow Guide](/artifacts/latam/brazil-lgpd/ripd-workflow.md): Brazil LGPD guidance for RIPD Workflow, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Small Processing Agents Guide](/artifacts/latam/brazil-lgpd/small-processing-agents.md): Brazil LGPD guidance for Small Processing Agents, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Templates Guide](/artifacts/latam/brazil-lgpd/templates.md): Practical guidance for the Brazil LGPD templates, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD Transfer Workflow Guide](/artifacts/latam/brazil-lgpd/transfer-workflow.md): Brazil LGPD guidance for Transfer Workflow, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD vs CCPA Guide](/artifacts/latam/brazil-lgpd/lgpd-vs-ccpa.md): Brazil LGPD guidance for LGPD vs CCPA, with practical decisions, evidence, edge cases, and external source citations. - [Brazil LGPD vs GDPR Guide](/artifacts/latam/brazil-lgpd/lgpd-vs-gdpr.md): Brazil LGPD guidance for LGPD vs GDPR, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Children's Data under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/children-s-data.md): Brazil LGPD guidance for Children's Data, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Controller Operator and DPO Roles under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/controller-operator-and-dpo-roles.md): Brazil LGPD guidance for Controller Operator and DPO Roles, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Cookies under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/cookies.md): Brazil LGPD guidance for Cookies, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Incident Reporting To ANPD under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/incident-reporting-to-anpd.md): Brazil LGPD guidance for Incident Reporting To ANPD, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about International Transfer Mechanisms under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/international-transfer-mechanisms.md): Brazil LGPD guidance for International Transfer Mechanisms, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Legal Bases under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/legal-bases.md): Brazil LGPD guidance for Legal Bases, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Legitimate Interest Balancing under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/legitimate-interest-balancing.md): Brazil LGPD guidance for Legitimate Interest Balancing, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about RIPD and DPIA under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/ripd-and-dpia.md): Brazil LGPD guidance for RIPD and DPIA, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Sanctions Methodology under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/sanctions-methodology.md): Brazil LGPD guidance for Sanctions Methodology, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Small Processing Agents under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/small-processing-agents.md): Brazil LGPD guidance for Small Processing Agents, with practical decisions, evidence, edge cases, and external source citations. --- [Privacy Policy](https://www.sorena.io/privacy.md) | [Terms of Use](https://www.sorena.io/terms-of-use.md) | [DMCA](https://www.sorena.io/dmca.md) | [About Us](https://www.sorena.io/about-us.md) (c) 2026 Sorena AB (559573-7338). All rights reserved. Source: https://www.sorena.io/artifacts/latam/brazil-lgpd/checklist.md