Artifact GuideBrazilController Operator and DPO Roles

Brazil LGPD Controller Operator and DPO Roles

The controller decides why and how personal data is processed. The operator processes it on the controller's behalf, and the encarregado is the communication channel with data subjects and the ANPD.

Classify roles for each processing purpose from actual decision rights and instructions, then document the contract, contact channel, oversight, and escalation path.

Author
Sorena AI
Published
May 9, 2026
Updated
Jul 25, 2026
Questions
3

Structured answer sets in this page tree.

Primary sources
5

Cited legal and guidance references.

Publication metadata
Sorena AI
Published May 9, 2026
Updated Jul 25, 2026
Overview

Under Brazil's LGPD, the decides why and in what essential way personal data is processed, the processes it on the controller's behalf, and the is the formal communication channel with data subjects and the ANPD. Apply those tests to each purpose and actual workflow. A company can be a controller for one activity and an operator for another, and a contract label does not override the facts.

Search this module

Find a question or answer quickly

3 of 3 questions
Question 1

What should teams do about Controller Operator and DPO Roles under the Brazil LGPD?

The binding definitions are in LGPD Article 5, with operational duties in Articles 37 to 42. ANPD guidance explains how the Agency applies those definitions but does not replace the statute. Start with one processing purpose, identify who decides that purpose and the essential elements of the operation, then identify who acts on whose documented instructions.

A can be a natural person or a legal entity. More than one party may be a controller when each makes relevant decisions; the ANPD guide treats joint control as a fact-specific situation in which multiple controllers have common, convergent, or complementary decisions and influence the purposes and essential elements. Shared infrastructure or commercial cooperation alone does not settle the result.

An must act on behalf of a . A payroll provider may be an operator for calculating salaries under the employer's instructions, for example, but may be a controller for a separate purpose it determines itself. Employees, directors, and teams acting under the organization's direct authority are part of that organization rather than separate operators for routine internal work.

The is a channel and adviser, not the owner of the business purpose or legal-basis decision. LGPD Article 41 assigns the the appointment and publication duties, while the current Article 5 definition and ANPD rules frame the role as the channel for the processing agent. Record which entity made the formal appointment and which processing activities and entities the appointment covers.

  • : approve the purpose, legal basis, essential processing design, transparency, retention, recipients, rights response, instructions, and any reportable-incident decision.
  • : document the , instructions, permitted purpose, data and people covered, security measures, suboperator conditions, assistance duties, audit evidence, and return, deletion, or lawful retention at the end.
  • : maintain a clear public contact channel, accept complaints and ANPD communications, route action to the accountable owner, guide employees and contractors, and retain the appointment and activity records.
  • Reassess the map when a party starts reusing data for its own purpose, chooses new essential processing elements, appoints a suboperator, changes the affected , or materially changes the service.
Citations
Question 2

What evidence should teams keep for Controller Operator and DPO Roles under the Brazil LGPD?

Keep one role record per purpose. It should connect the factual decision map to contracts, instructions, the suboperator chain, rights and incident cooperation, and the published channel. Review real system access, approvals, and data reuse against the written allocation; a signature alone does not prove the role.

  • Keep the role analysis by purpose, approvals, contracts and instructions, suboperator authorizations, security requirements, request routing, incident escalation, retention decisions, and audit evidence.
  • Keep the formal appointment and substitute arrangement. Publish the required identity and contact information clearly and keep it current; a legal entity may perform the role when the responsible natural person is identified as the ANPD rules require.
  • Give the direct access to the people who decide processing matters, adequate human, technical, and administrative resources, and timely information about material activities.
  • Record conflicting duties and the measures used to avoid them. A conflict exists when another role can lead the to decide the purposes and means of processing or otherwise compromise objective performance.
Citations
Question 3

Which mistakes create risk when handling Controller Operator and DPO Roles under the Brazil LGPD?

A contract label is not conclusive. A service provider may be an for instructed work and a for a separate purpose it determines. Under Article 42, an operator can be jointly liable for damage when it breaches data-protection law or fails to follow lawful controller instructions, in which case it is treated like the controller for that damage, subject to Article 43 defenses.

  • Do not classify a vendor as an merely because a contract uses that label; test each purpose and any independent reuse.
  • Do not treat employees acting under the organization's authority as separate operators for routine internal processing.
  • Do not assume every multi-party arrangement creates joint control. Record each party's actual decision power, common or convergent decisions, and responsibility to data subjects.
  • Do not assign the responsibility for business decisions that belong to the or combine the role with duties that create a conflict of interest.
Citations
Primary sources

References and citations

gov.br
Referenced sections
  • ANPD guidance supports the operational duties and escalation route for the encarregado role.
"O encarregado atua como canal de comunicação entre o titular, o agente de tratamento e a ANPD."
planalto.gov.br
Referenced sections
  • LGPD Article 5 defines controlador, operador, encarregado, and agentes de tratamento for this roles FAQ.
"controlador: pessoa natural ou jurídica, de direito público ou privado, a quem competem as decisões referentes ao tratamento de dados pessoais"
Related guides

Explore more topics

Brazil LGPD ANPD Enforcement and Fines Guide
How ANPD investigates LGPD infringements, classifies severity, selects sanctions, calculates fines, and weighs aggravating and mitigating evidence.
Brazil LGPD Applicability Test Guide
Apply LGPD Articles 3 and 4 to a processing activity, including foreign organisations, Brazil collection, targeting, exclusions, and the evidence to retain.
Brazil LGPD Breach Notification Guide
Apply Brazil's LGPD incident notification test, three-business-day clock, notice content, phased filing, affected-person communication, and five-year records.
Brazil LGPD Checklist
An evidence-based Brazil LGPD checklist for scope, roles, legal bases, notices, rights, vendors, security incidents, transfers, retention, and governance.
Brazil LGPD Compliance Guide
Build an LGPD compliance program from processing records, legal bases, transparency, rights, security, vendors, transfers, incidents, and accountable evidence.
Brazil LGPD Controller Operator and DPO Roles Guide
Classify LGPD controller, operator, sub-operator, and encarregado roles from actual decisions, instructions, processing facts, and Resolution 18 duties.
Brazil LGPD Data Subject Rights Guide
Brazil LGPD rights guide covering confirmation, access, correction, restriction, deletion, portability, consent, sharing, objection, and automated decisions.
Brazil LGPD Deadlines and Compliance Calendar Guide
Track Brazil LGPD commencement dates, data-access responses, incident notices, international-transfer clauses, and ANPD fine-payment deadlines.
Brazil LGPD DSAR Response Template Guide
Build an LGPD data-subject response that identifies the right, applies the correct timing, records the decision, protects third parties, and proves delivery.
Brazil LGPD DSAR Workflow Guide
Run an LGPD data-subject request from intake and identity checks through rights analysis, response timing, evidence, exceptions, and escalation.
Brazil LGPD Incident Reporting to ANPD Guide
Decide whether an LGPD incident is reportable, calculate the ANPD deadline, prepare complete or staged notices, and keep the required five-year record.
Brazil LGPD Incident Workflow Guide
Run an LGPD personal-data incident from confirmation and risk assessment through three-business-day notices, supplementation, mitigation, and records.
Brazil LGPD International Transfer Mechanisms Guide
Compare LGPD international-transfer mechanisms: adequacy, ANPD standard clauses, approved specific clauses, global corporate rules, consent, and other Article 33 routes.
Brazil LGPD International Transfers Guide
Brazil LGPD international-transfer guide for identifying transfers, selecting Article 33 mechanisms, applying ANPD clauses, EU adequacy, and transparency.
Brazil LGPD Lawful Bases Guide
Compare LGPD Article 7 bases for ordinary personal data and Article 11 bases for sensitive data, with consent, necessity, evidence, and edge cases.
Brazil LGPD Legal Bases and Legitimate Interest Balancing Guide
Apply LGPD legitimate interest through purpose, necessity, balancing, reasonable expectations, safeguards, children, sensitive-data limits, and records.
Brazil LGPD Penalties and Fines Guide
Understand every ANPD administrative sanction under LGPD Article 52, the fine ceilings, non-monetary penalties, and public-body limits.
Brazil LGPD Privacy Law FAQ
Answers to common Brazil LGPD questions about scope, roles, legal bases, rights, incidents, transfers, impact reports, small agents, and enforcement.
Brazil LGPD Requirements Guide
Reference guide to Brazil LGPD scope, principles, legal bases, transparency, rights, roles, security, incidents, transfers, records, and ANPD oversight.
Brazil LGPD RIPD and DPIA Evidence Guide
Build an LGPD RIPD evidence file that proves the processing scope, high-risk screen, necessity, safeguards, residual risk, approval, and later review.
Brazil LGPD RIPD Workflow Guide
Decide when to prepare an LGPD RIPD, apply the ANPD high-risk screen, document required evidence and mitigation, approve residual risk, and review changes.
Brazil LGPD Small Processing Agents Guide
Check whether an organization qualifies for Brazil's small-processing-agent regime, which flexibilities apply, and which LGPD duties remain unchanged.
Brazil LGPD Templates Guide
Choose and maintain LGPD templates for processing records, data-subject requests, incidents, RIPDs, transfers, and controller-operator role evidence.
Brazil LGPD Transfer Workflow Guide
Classify an LGPD international transfer, confirm the processing legal basis and transfer mechanism, document onward transfers, and approve the evidence before launch.
LGPD vs CCPA: Key Differences for Privacy Teams
Compare Brazil's LGPD and California's CCPA by scope, legal bases, consumer rights, sale and sharing rules, deadlines, transfers, and enforcement.
LGPD vs GDPR: Key Differences for Privacy Teams
Compare Brazil's LGPD and the EU GDPR by scope, legal bases, roles, rights deadlines, impact assessments, incidents, transfers, and enforcement.
What should teams do about Children's Data under the Brazil LGPD?
Apply LGPD Article 14 to children's and adolescents' data: age categories, best interests, legal bases, parental consent, limited collection, notices, and evidence.
What should teams do about Cookies under the Brazil LGPD?
Brazil LGPD guidance for Cookies, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about Incident Reporting To ANPD under the Brazil LGPD?
Brazil LGPD guidance for Incident Reporting To ANPD, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about International Transfer Mechanisms under the Brazil LGPD?
Brazil LGPD guidance for International Transfer Mechanisms, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about Legal Bases under the Brazil LGPD?
Brazil LGPD guidance for Legal Bases, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about Legitimate Interest Balancing under the Brazil LGPD?
Brazil LGPD guidance for Legitimate Interest Balancing, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about RIPD and DPIA under the Brazil LGPD?
Brazil LGPD guidance for RIPD and DPIA, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about Sanctions Methodology under the Brazil LGPD?
Brazil LGPD guidance for Sanctions Methodology, with practical decisions, evidence, edge cases, and external source citations.
What should teams do about Small Processing Agents under the Brazil LGPD?
Brazil LGPD guidance for Small Processing Agents, with practical decisions, evidence, edge cases, and external source citations.