Artifact GuideBrazilRipd Workflow

Brazil LGPD Ripd Workflow

Ripd Workflow decisions under the Brazil LGPD should be written in operational language: who is in scope, what must happen, what evidence proves it, and when escalation is needed.

Use this section to define scope, owner, evidence inputs, and the review outcome before execution.

Back to main artifact Review sources

Author

Sorena AI

Published

May 9, 2026

Updated

May 9, 2026

Sections

Structured answer sets in this page tree.

Primary sources

Cited legal and guidance references.

Publication metadata

Sorena AI

Published May 9, 2026

Updated May 9, 2026

Overview

A RIPD workflow is the step-by-step process for deciding when to prepare a Relatorio de Impacto a Protecao de Dados Pessoais under the Brazil LGPD, what the report must cover, and who must review it. Use this page to see the trigger, owner, evidence, and escalation path in plain language before implementation.

Section 1

How should a Ripd Workflow run under the Brazil LGPD?

Run the workflow as LGPD processing triage: first confirm whether the processing activity or proposed change may require a RIPD, then identify the role, purpose, lawful basis, data category, right/transfer/incident trigger, required action, evidence, and DPO review.

Capture the request, product, role, data flow, jurisdiction, and deadline.
Check the source-linked rule and route exceptions before implementation.
Record the action taken, owner, reviewer, evidence location, and next review date.
Keep a plain-language output that support, product, legal, security, and compliance teams can all understand.

Sources for this answer

LEI Nº 13.709, DE 14 DE AGOSTO DE 2018

LGPD Article 38 source for RIPD content, including minimum report content and ANPD authority to require an impact report.

RESOLUÇÃO CD/ANPD Nº 1, DE 28 DE OUTUBRO DE 2021

ANPD procedural rule for cleanly recording request receipt and routing in the RIPD workflow.

RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023

ANPD enforcement-regulation source for escalation points when RIPD workflow gaps could create sanction exposure.

Section 2

What fields should the Ripd Workflow template capture?

A useful template captures role, purpose, lawful basis, data subject, category, transfer or incident trigger, owner, evidence, and ANPD/DPO escalation note.

Source URL and source quote.
Entity, product, service, system, data category, and user group.
Decision result, control action, owner, reviewer, due date, and escalation reason.
Evidence attachment, approval note, exception note, and review cadence.

Sources for this answer

RESOLUÇÃO CD/ANPD Nº 1, DE 28 DE OUTUBRO DE 2021

ANPD procedural rule for cleanly recording request receipt and routing in the RIPD workflow.

RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023

ANPD enforcement-regulation source for escalation points when RIPD workflow gaps could create sanction exposure.

Resolução CD/ANPD nº 2, de 27 de janeiro de 2022

Official ANPD small-processing-agent rule used to keep RIPD workflow exceptions Brazil-specific.

Section 3

How should teams review and improve the Ripd Workflow?

Review the workflow after ANPD guidance, new vendors, new purposes, cross-border changes, incidents, complaints, or changes to data-subject channels.

Track recurring exception categories and update intake questions.
Remove fields that never affect the decision.
Add fields when reviews show missing source evidence or unclear ownership.
Confirm the public page content and reusable internal guidance show the same source-linked Brazil LGPD workflow.

Sources for this answer

LEI Nº 13.709, DE 14 DE AGOSTO DE 2018

LGPD Article 38 source for RIPD content, including minimum report content and ANPD authority to require an impact report.

RESOLUÇÃO CD/ANPD Nº 1, DE 28 DE OUTUBRO DE 2021

ANPD procedural rule for cleanly recording request receipt and routing in the RIPD workflow.

RESOLUÇÃO CD/ANPD Nº 4, DE 24 DE FEVEREIRO DE 2023

ANPD enforcement-regulation source for escalation points when RIPD workflow gaps could create sanction exposure.

Resolução CD/ANPD nº 2, de 27 de janeiro de 2022

Official ANPD small-processing-agent rule used to keep RIPD workflow exceptions Brazil-specific.

Recommended next step