- Official ANPD guide for role and DPO answers.
References and citations
- Official ANPD interpretation on children and adolescents data.
- Primary legal text for the questions answered on this page.
- Official ANPD sanctions and dosimetry rule.
Use direct answers for the questions teams ask every week.
These answers follow the law and current ANPD guidance, not generic privacy boilerplate.
Structured answer sets in this page tree.
Cited legal and guidance references.
The questions below are the ones that repeatedly drive launch delays, legal escalations, and weak evidence. The safest practice is to answer them once in a governed standard and then reuse the same answer format across the program.
Does LGPD apply to a foreign company? Yes, if Article 3 connects the processing to Brazil through the operation itself, offering or supplying goods or services to individuals located in Brazil, or collection in Brazil.
Can a vendor call itself only a processor and be done? No. The ANPD role analysis depends on who actually decides purpose and essential means in the real workflow.
How fast must access be provided? Article 19 allows a simplified response immediately or a complete declaration in up to 15 days.
Can requests be charged? The law says the request route should be without cost to the data subject.
Can legitimate interest be used for sensitive data? No. The ANPD guide explains that legitimate interest is a basis for ordinary personal data under Article 7 and does not appear in Article 11 for sensitive data.
Do children data always require consent? Article 14 paragraph 1 creates a highlighted-consent rule for children, but ANPD Statement No. 1 explains that children and adolescents data may also rely on Articles 7 or 11 when best interest prevails in the specific case.
When must an incident be reported? Under the current ANPD incident rule, reportable incidents need communication to ANPD and data subjects within 3 business days, with a 20 business day complement window for preliminary communication.
What is the fine cap? Article 52 allows up to 2 percent of Brazilian revenue, excluding taxes, capped at R$50 million per infraction, plus other non-monetary sanctions.
Research Copilot can take Brazil LGPD FAQ from cited answers to recurring questions on this topic to a reusable workflow inside Sorena. Teams working on Brazil LGPD can keep owners, evidence, and next steps aligned without copying this guide into separate documents.
Start from Brazil LGPD FAQ and answer scope, timing, and interpretation questions with cited outputs.
Review your current process, evidence gaps, and next steps for Brazil LGPD FAQ.