Artifact GuideBrazilDSAR Workflow

Brazil LGPD DSAR Workflow

DSAR Workflow decisions under the Brazil LGPD should be written in operational language: who is in scope, what must happen, what evidence proves it, and when escalation is needed.

Use this section to define scope, owner, evidence inputs, and the review outcome before execution.

Author
Sorena AI
Published
May 9, 2026
Updated
May 9, 2026
Sections
3

Structured answer sets in this page tree.

Primary sources
5

Cited legal and guidance references.

Publication metadata
Sorena AI
Published May 9, 2026
Updated May 9, 2026
Overview

This page explains how to handle LGPD data-subject requests in a clear workflow: which rights are in scope, who owns each step, what evidence to record, and when the response must be provided.

Section 1

How should a DSAR Workflow run under the Brazil LGPD?

Run the workflow as LGPD request triage for the rights in Article 18: confirmation of processing, access, correction, anonymization, blocking or deletion, portability, information about sharing, information about refusal to consent, and revocation of consent. For confirmation and access requests, the LGPD provides the response immediately in simplified form or within up to 15 days in a clear and complete declaration.

  • Capture the request, product, role, data flow, jurisdiction, and deadline.
  • Check whether the request is for confirmation, access, correction, deletion, portability, sharing information, objection, or revocation, then route it to the right owner.
  • Record the action taken, owner, reviewer, evidence location, and next review date.
  • Keep a plain-language output that support, product, legal, security, and compliance teams can all understand.
Section 2

What fields should the DSAR Workflow template capture?

A useful template captures role, purpose, lawful basis, data subject, category, transfer or incident trigger, owner, evidence, and ANPD/DPO escalation note.

  • Source URL and source quote.
  • Entity, product, service, system, data category, and user group.
  • Decision result, control action, owner, reviewer, due date, and escalation reason.
  • Evidence attachment, approval note, exception note, and review cadence.
Section 3

How should teams review and improve the DSAR Workflow?

Review the workflow after ANPD guidance, new vendors, new purposes, cross-border changes, incidents, complaints, or changes to data-subject channels.

  • Track recurring exception categories and update intake questions.
  • Remove fields that never affect the decision.
  • Add fields when reviews show missing source evidence or unclear ownership.
  • Confirm public-facing guidance, support scripts, and operational records stay consistent after each workflow review.
Primary sources

References and citations

gov.br
Referenced sections
  • ANPD guidance explaining confirmation, access, correction, deletion, portability, objection, and review rights that shape Brazil LGPD request workflows.
"confirmação sobre a existência de um tratamento de seus dados"
planalto.gov.br
Referenced sections
  • Primary LGPD source for DSAR workflow design, especially confirmation and access requests made by the data subject.
"A confirmação de existência ou o acesso a dados pessoais serão providenciados, mediante requisição do titular"
gov.br
Referenced sections
  • ANPD regulation used for evidence about petitions by data subjects after a controller has not resolved a request in the regulatory timeframe.
"petição de titular: comunicação feita à ANPD pelo titular de dados pessoais"
Related guides

Explore more topics

Brazil LGPD Anpd Enforcement And Fines Guide
Brazil LGPD guidance for Anpd Enforcement And Fines, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Applicability Test Guide
Practical guidance for the Brazil LGPD applicability test, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Breach Notification Guide
Brazil LGPD guidance for Breach Notification, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Checklist
Practical guidance for the Brazil LGPD checklist, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Compliance Guide
Practical guidance for the Brazil LGPD compliance, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Controller Operator And DPO Roles Guide
Brazil LGPD guidance for Controller Operator And DPO Roles, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Data Subject Rights Guide
Brazil LGPD guidance for Data Subject Rights, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Deadlines and Compliance Calendar Guide
Brazil LGPD guidance for Deadlines and Compliance Calendar, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD DSAR Response Template Guide
Brazil LGPD guidance for LGPD DSAR Response Template, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Incident Reporting To Anpd Guide
Brazil LGPD guidance for Incident Reporting To Anpd, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Incident Workflow Guide
Brazil LGPD guidance for Incident Workflow, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD International Transfer Mechanisms Guide
Brazil LGPD guidance for International Transfer Mechanisms, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD International Transfers Guide
Brazil LGPD guidance for International Transfers, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Lawful Bases Guide
Brazil LGPD guidance for Lawful Bases, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Legal Bases And Legitimate Interest Balancing Guide
Brazil LGPD guidance for Legal Bases And Legitimate Interest Balancing, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD penalties and fines Guide
Brazil LGPD guidance for penalties and fines, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Privacy Law FAQ
Practical guidance for the Brazil LGPD FAQ, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Requirements Guide
Practical guidance for the Brazil LGPD requirements, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Ripd And DPIA Evidence Guide
Brazil LGPD guidance for Ripd And DPIA Evidence, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Ripd Workflow Guide
Brazil LGPD guidance for Ripd Workflow, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Small Processing Agents Guide
Brazil LGPD guidance for Small Processing Agents, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Templates Guide
Practical guidance for the Brazil LGPD templates, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD Transfer Workflow Guide
Brazil LGPD guidance for Transfer Workflow, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD vs CCPA Guide
Brazil LGPD guidance for LGPD vs CCPA, with practical decisions, evidence, edge cases, and external source citations.
Brazil LGPD vs GDPR Guide
Brazil LGPD guidance for LGPD vs GDPR, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about Children's Data under the Brazil LGPD?
Brazil LGPD guidance for Children's Data, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about Controller Operator And DPO Roles under the Brazil LGPD?
Brazil LGPD guidance for Controller Operator And DPO Roles, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about Cookies under the Brazil LGPD?
Brazil LGPD guidance for Cookies, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about Incident Reporting To ANPD under the Brazil LGPD?
Brazil LGPD guidance for Incident Reporting To ANPD, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about International Transfer Mechanisms under the Brazil LGPD?
Brazil LGPD guidance for International Transfer Mechanisms, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about Legal Bases under the Brazil LGPD?
Brazil LGPD guidance for Legal Bases, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about Legitimate Interest Balancing under the Brazil LGPD?
Brazil LGPD guidance for Legitimate Interest Balancing, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about Ripd And DPIA under the Brazil LGPD?
Brazil LGPD guidance for Ripd And DPIA, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about Sanctions Methodology under the Brazil LGPD?
Brazil LGPD guidance for Sanctions Methodology, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about Small Processing Agents under the Brazil LGPD?
Brazil LGPD guidance for Small Processing Agents, with practical decisions, evidence, edge cases, and external source citations.