Brazil: Draft data protection law published
Published 28 January 2015
A draft Brazilian data protection law (the Law) has been published which proposes to protect data subjects when their personal data is being processed, regardless of whether or not the entity carrying out the processing is located in Brazil.
The Law mirrors the principles set out in the proposed EU Data Protection Regulation including the principles of transparency, data quality, data management and information security. The Law also proposes the creation of a data protection authority, which will have the authority to investigate, provide guidance and be consulted on data processing activities.
A website created to facilitate a public debate on the draft bill is accessible here (Portuguese).
The text of the Bill is available here (Portuguese).
What action could be taken to manage risks that may arise from this development?
Companies should keep track of the progress of the Law because if enacted it will impact any data processing activities of Brazilian personal data.