07 / 09 · Practice areaData protection sized to your operation.
Data mapping, documents, supplier contracts, data protection officer and incident response plan.
What we handle
Data mapping
What data the company processes, where it is and what it is used for.
Policy and terms
Privacy policy and terms of use for the website and systems.
Suppliers
Data protection clauses in contracts.
Data protection officer (DPO)
Ongoing service as the data protection officer (encarregado), with reports.
Incidents
Response plan and notification to the ANPD (Brazil’s data protection authority) when required.
Training
Training for the team that handles data.
Fixed-scope solution in this area
See all Strategic SolutionsSolutions for this topic
Frequently asked questions
Does every company need to comply with the LGPD (Brazil’s data protection law)?
The law applies to anyone who processes personal data, which includes almost every company. The scope of compliance follows the volume and type of data processed, and the ANPD (Brazil’s data protection authority) has simplified rules for small-scale processing agents.
Do I need to appoint a data protection officer?
As a rule, yes. Small-scale processing agents may be exempt, but they must keep a communication channel with data subjects (ANPD Resolution CD/ANPD 2/2022).

