After 8 years of work and inspired by the 1995 European Directive, the 1st Brazilian law on the protection of personal data (LGPD) will come into force. It creates and standardizes a comprehensive system of protection with 10 legal bases to justify the processing of personal data (including consent), enhanced protection for so-called sensitive data (eg ethnic origin, political and religious opinions, sexual preferences and genetical data), the creation of a dedicated authority (ANPD), the establishment of a function of leader of privacy within public and private entities, data breach notification obligations, fines that can escalate up to 50 million Brazilian reals (about 10 millions euros) with a possible prohibition of the incriminated treatments.
