The Brazilian General Data Protection Law (LGPD) establishes rules on how personal data (of individuals) must be treated in physical or digital means. This law aims to protect your rights to freedom and privacy.
What is the General Data Protection Law (LGPD)?
The General Data Protection Law (LGPD) establishes rules on how personal data (of individuals) must be treated in physical or digital means. This law aims to protect your rights to freedom and privacy.
What changes with the General Data Protection Law?
The LGPD determines that personal data processing must respect the data subject’s privacy. In this way, the activity must bring clear, precise, and easily accessible information about the following:
How will personal data be treated.
For what purpose will this data be used.
What are the measures applied for the security of this information.
What rights does the holder involved have over their personal data.
The LGPD guarantees, in a non-absolute way, the right to access, exclusion, and revocation, among others. Thus, any processing activity involving personal data must observe the rules brought by the LGPD (presented in the form of principles) and be able to meet all the rights guaranteed to the holders involved.
This law also acts extraterritorially when:
What is the purpose of the General Data Protection Act?
The purpose of the law is to protect the rights of freedom and privacy of holders of personal data.
Important Concepts of the LGPD
As the Holder of your Personal Data, you have the right to:
Confirm whether we process your personal data and, if so, request access to the data we hold about you.
Update and fix
Update and correct incomplete, inaccurate, or out-of-date data we hold about you.
Deletion and blocking
Request anonymization, blocking, and deletion of unnecessary or processed data in violation of the provisions of the LGPD.
Carry your data, observing the applicable rules and commercial and industrial secrets.
Request information from public and private entities with which the Controller carried out shared use of data.
Inquire about not providing consent when requested and what are the consequences of not providing it.
Revoke the consent that you may have given, at any time and without charge, by express manifestation.
Deletion of Data Processed with your consent, except when keeping the data is necessary or permitted by law.
Opposition to treatment
Oppose Treatments are carried out based on other legal bases in case of non-compliance with the LGPD.
Review of decisions taken based on Automated Processing of Personal Data that affect you, such as credit decisions.
IN CHARGE OF DATA PROCESSING – DPO
Evandro Luis Pazini
Person in charge of data processing for the company Fontana S.A