Regulation - Brazil
LGPD
Operational summary for teams that need to structure data processing with evidence, deadlines, and governance.
1. Legal bases per activity (Art. 7)
Standardize legal basis registration by workflow using approval checkpoints and clear ownership by stage.
2. Data subject rights (Art. 18)
- Workflows for access, correction, anonymization, and deletion, with SLA and accountable owners.
- Execution history for audits and regulatory response.
- Operational standard to reduce ad hoc responses and deadline risk.
3. Incidents and communication (Art. 48)
Use incident runbooks to record impact, decisions, approvals, and when communication to ANPD and data subjects is required.
4. Operational governance
- Role-based access controls and organization isolation.
- Audit trail for sensitive actions and approvals.
- Versioned processes to keep execution consistency over time.
5. Important notice
This content is informational and does not replace legal guidance. Final compliance depends on legal basis, context, and controller governance.