--- title: "Brazil LGPD Privacy Law FAQ" canonical_url: "https://www.sorena.io/artifacts/latam/brazil-lgpd/faq" source_url: "https://www.sorena.io/artifacts/latam/brazil-lgpd/faq/items/page/2" author: "Sorena AI" description: "Practical guidance for the Brazil LGPD FAQ, with practical decisions, evidence, edge cases, and external source citations." published_at: "2026-05-09" updated_at: "2026-05-09" keywords: - "Brazil LGPD" - "FAQ" - "Brazil LGPD FAQ" - "compliance checklist" - "practical guidance" - "Compliance" - "Regulatory guidance" --- **[SORENA](https://www.sorena.io/)** - AI-Powered GRC Platform [Home](https://www.sorena.io/) | [Solutions](https://www.sorena.io/solutions) | [Artifacts](https://www.sorena.io/artifacts) | [About Us](https://www.sorena.io/about-us) | [Contact](https://www.sorena.io/contact) | [Portal](https://app.sorena.io) --- # Brazil LGPD Privacy Law FAQ Practical guidance for the Brazil LGPD FAQ, with practical decisions, evidence, edge cases, and external source citations. *Artifact Guide* *Brazil* *FAQ* ## Brazil LGPD FAQ Use this FAQ as a practical operating reference: each answer defines what to do, who owns the decision, and what evidence is required before moving forward. Use this section to define scope, owner, evidence inputs, and the review outcome before execution. This FAQ hub translates recurring LGPD questions into clear decisions, required evidence, and review steps for cross-functional teams. ## Browse sub-FAQ modules ### [What should teams do about Children's Data under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/children-s-data.md) Brazil LGPD guidance for Children's Data, with practical decisions, evidence, edge cases, and external source citations. - 3 items ### [What should teams do about Controller Operator And DPO Roles under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/controller-operator-and-dpo-roles.md) Brazil LGPD guidance for Controller Operator And DPO Roles, with practical decisions, evidence, edge cases, and external source citations. - 3 items ### [What should teams do about Cookies under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/cookies.md) Brazil LGPD guidance for Cookies, with practical decisions, evidence, edge cases, and external source citations. - 3 items ### [What should teams do about Incident Reporting To ANPD under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/incident-reporting-to-anpd.md) Brazil LGPD guidance for Incident Reporting To ANPD, with practical decisions, evidence, edge cases, and external source citations. - 3 items ### [What should teams do about International Transfer Mechanisms under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/international-transfer-mechanisms.md) Brazil LGPD guidance for International Transfer Mechanisms, with practical decisions, evidence, edge cases, and external source citations. - 3 items ### [What should teams do about Legal Bases under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/legal-bases.md) Brazil LGPD guidance for Legal Bases, with practical decisions, evidence, edge cases, and external source citations. - 3 items ### [What should teams do about Legitimate Interest Balancing under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/legitimate-interest-balancing.md) Brazil LGPD guidance for Legitimate Interest Balancing, with practical decisions, evidence, edge cases, and external source citations. - 3 items ### [What should teams do about Ripd And DPIA under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/ripd-and-dpia.md) Brazil LGPD guidance for Ripd And DPIA, with practical decisions, evidence, edge cases, and external source citations. - 3 items ### [What should teams do about Sanctions Methodology under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/sanctions-methodology.md) Brazil LGPD guidance for Sanctions Methodology, with practical decisions, evidence, edge cases, and external source citations. - 3 items ### [What should teams do about Small Processing Agents under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/small-processing-agents.md) Brazil LGPD guidance for Small Processing Agents, with practical decisions, evidence, edge cases, and external source citations. - 3 items Browse all indexed questions: [/artifacts/latam/brazil-lgpd/faq/items](/artifacts/latam/brazil-lgpd/faq/items.md) ## All FAQ items *Page 2 of 2. Showing 10 of 30 items.* ### [Which mistakes create risk when handling Legitimate Interest Balancing under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/legitimate-interest-balancing.md#which-mistakes-create-risk-when-handling-legitimate-interest-balancing-under-the-brazil-lgpd) *Module: [What should teams do about Legitimate Interest Balancing under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/legitimate-interest-balancing.md)* The common failure pattern is using a GDPR-style answer without checking LGPD roles, lawful bases, ANPD guidance, transfer rules, incident thresholds, and Brazilian enforcement context. - Using an old threshold, deadline, source page, or contract template without checking current source text. - Treating a source-linked exception as a general exemption for every product or data flow. - Publishing notices, controls, or answers that do not match the actual product behavior. Sources for this answer: - [LEI Nº 13.709, DE 14 DE AGOSTO DE 2018 - Art. 10](https://www.planalto.gov.br/ccivil_03/_Ato2015-2018/2018/Lei/L13709compilado.htm?ref=sorena.io) - Article 10 is the official LGPD basis for legitimate-interest balancing, including necessity, transparency, and ANPD impact-report requests. - [LEI Nº 13.709, DE 14 DE AGOSTO DE 2018 - Art. 10 §1º](https://www.planalto.gov.br/ccivil_03/_Ato2015-2018/2018/Lei/L13709compilado.htm?ref=sorena.io) - Necessity language supports limiting legitimate-interest processing to the minimum personal data needed for the stated purpose. - [LEI Nº 13.709, DE 14 DE AGOSTO DE 2018 - Art. 10 §2º](https://www.planalto.gov.br/ccivil_03/_Ato2015-2018/2018/Lei/L13709compilado.htm?ref=sorena.io) - Transparency language supports documenting notices and review evidence for legitimate-interest balancing. - [LEI Nº 13.709, DE 14 DE AGOSTO DE 2018 - Art. 10 §3º](https://www.planalto.gov.br/ccivil_03/_Ato2015-2018/2018/Lei/L13709compilado.htm?ref=sorena.io) - ANPD impact-report language supports retaining a balancing record and escalation path for legitimate-interest processing. ### [What should teams do about Ripd And DPIA under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/ripd-and-dpia.md#what-should-teams-do-about-ripd-and-dpia-under-the-brazil-lgpd) *Module: [What should teams do about Ripd And DPIA under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/ripd-and-dpia.md)* Teams should treat Ripd And DPIA under the Brazil LGPD as a source-linked operating decision: confirm whether the issue affects controller/operator roles, lawful basis, data-subject rights, children data, international transfers, security incidents, DPO/encarregado duties, or ANPD enforcement exposure, assign the team that can change the process, and keep evidence showing the action and review trigger. - Write the Ripd And DPIA decision in one sentence before drafting controls. - Attach the external source URL and a short source quote to the evidence record. - Route unclear cases to legal, privacy, security, or compliance review before launch. Sources for this answer: - [LEI Nº 13.709, DE 14 DE AGOSTO DE 2018](https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm?ref=sorena.io) - Primary LGPD source for RIPD/DPIA records, controller accountability, lawful basis, data-subject rights, security duties, and ANPD authority requests. - [PORTARIA ANPD N° 35, DE 4 DE NOVEMBRO DE 2022](https://www.in.gov.br/web/dou/-/portaria-ANPD-n-35-de-4-de-novembro-de-2022-442057885?ref=sorena.io) - ANPD agenda source for tracking regulatory priorities that affect RIPD/DPIA implementation and evidence planning. - [RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023](https://www.in.gov.br/web/dou/-/resolucao-cd/ANPD-n-4-de-24-de-fevereiro-de-2023-466146077?ref=sorena.io) - ANPD sanctions regulation source for enforcement exposure, corrective action, and compliance evidence planning. ### [What evidence should teams keep for Ripd And DPIA under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/ripd-and-dpia.md#what-evidence-should-teams-keep-for-ripd-and-dpia-under-the-brazil-lgpd) *Module: [What should teams do about Ripd And DPIA under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/ripd-and-dpia.md)* Useful evidence is not just a privacy notice. Keep the source, role map, lawful-basis note, rights log, transfer analysis, incident assessment, DPO review, and approval trail together. - Source URL and quote used for the decision. - Scope notes, screenshots, data-flow or system references, and role mapping. - Implementation ticket, approval record, exception notes, and review date. Sources for this answer: - [PORTARIA ANPD N° 35, DE 4 DE NOVEMBRO DE 2022](https://www.in.gov.br/web/dou/-/portaria-ANPD-n-35-de-4-de-novembro-de-2022-442057885?ref=sorena.io) - ANPD agenda source for tracking regulatory priorities that affect RIPD/DPIA implementation and evidence planning. - [RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023](https://www.in.gov.br/web/dou/-/resolucao-cd/ANPD-n-4-de-24-de-fevereiro-de-2023-466146077?ref=sorena.io) - ANPD sanctions regulation source for enforcement exposure, corrective action, and compliance evidence planning. - [Guia Orientativo sobre Segurança da Informação para Agentes de Tratamento de Pequeno Porte](https://www.gov.br/anpd/pt-br/assuntos/noticias/anpd-publica-guia-de-seguranca-para-agentes-de-tratamento-de-pequeno-porte?ref=sorena.io) - ANPD guidance source for practical administrative and technical security measures that support LGPD evidence and control design. ### [Which mistakes create risk when handling Ripd And DPIA under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/ripd-and-dpia.md#which-mistakes-create-risk-when-handling-ripd-and-dpia-under-the-brazil-lgpd) *Module: [What should teams do about Ripd And DPIA under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/ripd-and-dpia.md)* The common failure pattern is using a GDPR-style answer without checking LGPD roles, lawful bases, ANPD guidance, transfer rules, incident thresholds, and Brazilian enforcement context. - Using an old threshold, deadline, source page, or contract template without checking current source text. - Treating a source-linked exception as a general exemption for every product or data flow. - Publishing notices, controls, or answers that do not match the actual product behavior. Sources for this answer: - [LEI Nº 13.709, DE 14 DE AGOSTO DE 2018](https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm?ref=sorena.io) - Primary LGPD source for RIPD/DPIA records, controller accountability, lawful basis, data-subject rights, security duties, and ANPD authority requests. - [PORTARIA ANPD N° 35, DE 4 DE NOVEMBRO DE 2022](https://www.in.gov.br/web/dou/-/portaria-ANPD-n-35-de-4-de-novembro-de-2022-442057885?ref=sorena.io) - ANPD agenda source for tracking regulatory priorities that affect RIPD/DPIA implementation and evidence planning. - [RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023](https://www.in.gov.br/web/dou/-/resolucao-cd/ANPD-n-4-de-24-de-fevereiro-de-2023-466146077?ref=sorena.io) - ANPD sanctions regulation source for enforcement exposure, corrective action, and compliance evidence planning. - [Guia Orientativo sobre Segurança da Informação para Agentes de Tratamento de Pequeno Porte](https://www.gov.br/anpd/pt-br/assuntos/noticias/anpd-publica-guia-de-seguranca-para-agentes-de-tratamento-de-pequeno-porte?ref=sorena.io) - ANPD guidance source for practical administrative and technical security measures that support LGPD evidence and control design. ### [How should teams prepare for ANPD sanctions decisions under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/sanctions-methodology.md#how-should-teams-prepare-for-anpd-sanctions-decisions-under-the-brazil-lgpd) *Module: [What should teams do about Sanctions Methodology under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/sanctions-methodology.md)* Teams should treat Sanctions Methodology under the Brazil LGPD as a source-linked operating decision: confirm whether the issue affects controller/operator roles, lawful basis, data-subject rights, children data, international transfers, security incidents, DPO/encarregado duties, or ANPD enforcement exposure, assign the team that can change the process, and keep evidence showing the action and review trigger. - Write the Sanctions Methodology decision in one sentence before drafting controls. - Attach the external source URL and a short source quote to the evidence record. - Route unclear cases to legal, privacy, security, or compliance review before launch. Sources for this answer: - [LEI Nº 13.709, DE 14 DE AGOSTO DE 2018](https://www.planalto.gov.br/ccivil_03/_Ato2015-2018/2018/Lei/L13709compilado.htm?ref=sorena.io) - Official LGPD text used to connect sanctions methodology to the Article 52 administrative-sanctions framework and related ANPD authority. - [RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023](https://www.in.gov.br/web/dou/-/resolucao-cd/anpd-n-4-de-24-de-fevereiro-de-2023-466146077?ref=sorena.io) - ANPD dosimetry regulation used to support sanctions-methodology decisions, fine calculation evidence, and enforcement-risk review. ### [What evidence should teams keep for Sanctions Methodology under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/sanctions-methodology.md#what-evidence-should-teams-keep-for-sanctions-methodology-under-the-brazil-lgpd) *Module: [What should teams do about Sanctions Methodology under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/sanctions-methodology.md)* Useful evidence is not just a privacy notice. Keep the source, role map, lawful-basis note, rights log, transfer analysis, incident assessment, DPO review, and approval trail together. - Source URL and quote used for the decision. - Scope notes, screenshots, data-flow or system references, and role mapping. - Implementation ticket, approval record, exception notes, and review date. Sources for this answer: - [RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023](https://www.in.gov.br/web/dou/-/resolucao-cd/anpd-n-4-de-24-de-fevereiro-de-2023-466146077?ref=sorena.io) - ANPD dosimetry regulation used to support sanctions-methodology decisions, fine calculation evidence, and enforcement-risk review. - [RESOLUÇÃO CD/ANPD Nº 1, DE 28 DE OUTUBRO DE 2021](https://www.gov.br/anpd/pt-br/acesso-a-informacao/institucional/atos-normativos/regulamentacoes_anpd/resolucao-cd-anpd-no1-2021?ref=sorena.io) - ANPD inspection regulation used to connect source-linked decisions to preventive, monitoring, and enforcement review records. ### [Which mistakes create risk when handling Sanctions Methodology under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/sanctions-methodology.md#which-mistakes-create-risk-when-handling-sanctions-methodology-under-the-brazil-lgpd) *Module: [What should teams do about Sanctions Methodology under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/sanctions-methodology.md)* The common failure pattern is using a GDPR-style answer without checking LGPD roles, lawful bases, ANPD guidance, transfer rules, incident thresholds, and Brazilian enforcement context. - Using an old threshold, deadline, source page, or contract template without checking current source text. - Treating a source-linked exception as a general exemption for every product or data flow. - Publishing notices, controls, or answers that do not match the actual product behavior. Sources for this answer: - [LEI Nº 13.709, DE 14 DE AGOSTO DE 2018](https://www.planalto.gov.br/ccivil_03/_Ato2015-2018/2018/Lei/L13709compilado.htm?ref=sorena.io) - Official LGPD text used to connect sanctions methodology to the Article 52 administrative-sanctions framework and related ANPD authority. - [RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023](https://www.in.gov.br/web/dou/-/resolucao-cd/anpd-n-4-de-24-de-fevereiro-de-2023-466146077?ref=sorena.io) - ANPD dosimetry regulation used to support sanctions-methodology decisions, fine calculation evidence, and enforcement-risk review. - [RESOLUÇÃO CD/ANPD Nº 1, DE 28 DE OUTUBRO DE 2021](https://www.gov.br/anpd/pt-br/acesso-a-informacao/institucional/atos-normativos/regulamentacoes_anpd/resolucao-cd-anpd-no1-2021?ref=sorena.io) - ANPD inspection regulation used to connect source-linked decisions to preventive, monitoring, and enforcement review records. ### [What should teams do about Small Processing Agents under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/small-processing-agents.md#what-should-teams-do-about-small-processing-agents-under-the-brazil-lgpd) *Module: [What should teams do about Small Processing Agents under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/small-processing-agents.md)* Teams should treat Small Processing Agents under the Brazil LGPD as a source-linked operating decision: confirm whether the issue affects controller/operator roles, lawful basis, data-subject rights, children data, international transfers, security incidents, DPO/encarregado duties, or ANPD enforcement exposure, assign the team that can change the process, and keep evidence showing the action and review trigger. - Write the Small Processing Agents decision in one sentence before drafting controls. - Attach the external source URL and a short source quote to the evidence record. - Route unclear cases to legal, privacy, security, or compliance review before launch. Sources for this answer: - [Resolução CD/ANPD nº 2, de 27 de janeiro de 2022](https://www.gov.br/anpd/pt-br/acesso-a-informacao/institucional/atos-normativos/regulamentacoes_anpd/resolucao-cd-anpd-no-2-de-27-de-janeiro-de-2022?ref=sorena.io) - ANPD small-processing-agent regulation used to identify which organizations qualify and which LGPD adaptations apply. - [LEI Nº 13.709, DE 14 DE AGOSTO DE 2018](https://www.planalto.gov.br/ccivil_03/_Ato2015-2018/2018/Lei/L13709compilado.htm?ref=sorena.io) - Official LGPD authority provision supporting ANPD rules for differentiated treatment of small processing agents. - [RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023](https://www.in.gov.br/web/dou/-/resolucao-cd/anpd-n-4-de-24-de-fevereiro-de-2023-466146077?ref=sorena.io) - Evidence support for the FAQ answer. ### [What evidence should teams keep for Small Processing Agents under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/small-processing-agents.md#what-evidence-should-teams-keep-for-small-processing-agents-under-the-brazil-lgpd) *Module: [What should teams do about Small Processing Agents under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/small-processing-agents.md)* Useful evidence is not just a privacy notice. Keep the source, role map, lawful-basis note, rights log, transfer analysis, incident assessment, DPO review, and approval trail together. - Source URL and quote used for the decision. - Scope notes, screenshots, data-flow or system references, and role mapping. - Implementation ticket, approval record, exception notes, and review date. Sources for this answer: - [LEI Nº 13.709, DE 14 DE AGOSTO DE 2018](https://www.planalto.gov.br/ccivil_03/_Ato2015-2018/2018/Lei/L13709compilado.htm?ref=sorena.io) - Official LGPD authority provision supporting ANPD rules for differentiated treatment of small processing agents. - [Resolução CD/ANPD nº 2, de 27 de janeiro de 2022](https://www.gov.br/anpd/pt-br/acesso-a-informacao/institucional/atos-normativos/regulamentacoes_anpd/resolucao-cd-anpd-no-2-de-27-de-janeiro-de-2022?ref=sorena.io) - ANPD small-processing-agent regulation used to identify which organizations qualify and which LGPD adaptations apply. - [RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023](https://www.in.gov.br/web/dou/-/resolucao-cd/anpd-n-4-de-24-de-fevereiro-de-2023-466146077?ref=sorena.io) - Evidence support for the FAQ answer. ### [Which mistakes create risk when handling Small Processing Agents under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/small-processing-agents.md#which-mistakes-create-risk-when-handling-small-processing-agents-under-the-brazil-lgpd) *Module: [What should teams do about Small Processing Agents under the Brazil LGPD?](/artifacts/latam/brazil-lgpd/faq/small-processing-agents.md)* The common failure pattern is using a GDPR-style answer without checking LGPD roles, lawful bases, ANPD guidance, transfer rules, incident thresholds, and Brazilian enforcement context. - Using an old threshold, deadline, source page, or contract template without checking current source text. - Treating a source-linked exception as a general exemption for every product or data flow. - Publishing notices, controls, or answers that do not match the actual product behavior. Sources for this answer: - [Resolução CD/ANPD nº 2, de 27 de janeiro de 2022](https://www.gov.br/anpd/pt-br/acesso-a-informacao/institucional/atos-normativos/regulamentacoes_anpd/resolucao-cd-anpd-no-2-de-27-de-janeiro-de-2022?ref=sorena.io) - ANPD small-processing-agent regulation used to identify which organizations qualify and which LGPD adaptations apply. - [LEI Nº 13.709, DE 14 DE AGOSTO DE 2018](https://www.planalto.gov.br/ccivil_03/_Ato2015-2018/2018/Lei/L13709compilado.htm?ref=sorena.io) - Official LGPD authority provision supporting ANPD rules for differentiated treatment of small processing agents. - [RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023](https://www.in.gov.br/web/dou/-/resolucao-cd/anpd-n-4-de-24-de-fevereiro-de-2023-466146077?ref=sorena.io) - Risk and boundary support for the FAQ answer. ## FAQ Pagination - Canonical index (page 1): [/artifacts/latam/brazil-lgpd/faq/items](/artifacts/latam/brazil-lgpd/faq/items.md) - Page 1 rule: `/page/1` is intentionally not generated; use the canonical index markdown URL. - Current page: 2 of 2 Pages: [1](/artifacts/latam/brazil-lgpd/faq/items.md) | [2](/artifacts/latam/brazil-lgpd/faq/items/page/2.md) [Previous page](/artifacts/latam/brazil-lgpd/faq/items.md) *Recommended next step* *Placement: after the practical guidance* ## Turn Brazil LGPD FAQ into assigned work This artifact page provides practical inputs, owner roles, required outputs, and evidence checkpoints for faq. - [Open Assessment Autopilot for Brazil LGPD](/solutions/assessment.md): Turn FAQ into scoped questions, evidence fields, and review tasks. - [Review Brazil LGPD source evidence](/solutions/research-copilot.md): Use Research Copilot to answer follow-up questions with cited source material. - [Talk through implementation](/contact.md): Review scope, evidence, owners, and the next compliance actions with operational practice. --- [Privacy Policy](https://www.sorena.io/privacy) | [Terms of Use](https://www.sorena.io/terms-of-use) | [DMCA](https://www.sorena.io/dmca) | [About Us](https://www.sorena.io/about-us) (c) 2026 Sorena AB (559573-7338). All rights reserved. Source: https://www.sorena.io/artifacts/latam/brazil-lgpd/faq/items/page/2