Skip to content
Let's talk
07 / 09 · Practice area

Data protection sized to your operation.

Data mapping, documents, supplier contracts, data protection officer and incident response plan.

What we handle

01

Data mapping

What data the company processes, where it is and what it is used for.

02

Policy and terms

Privacy policy and terms of use for the website and systems.

03

Suppliers

Data protection clauses in contracts.

04

Data protection officer (DPO)

Ongoing service as the data protection officer (encarregado), with reports.

05

Incidents

Response plan and notification to the ANPD (Brazil’s data protection authority) when required.

06

Training

Training for the team that handles data.

Frequently asked questions

Does every company need to comply with the LGPD (Brazil’s data protection law)?

The law applies to anyone who processes personal data, which includes almost every company. The scope of compliance follows the volume and type of data processed, and the ANPD (Brazil’s data protection authority) has simplified rules for small-scale processing agents.

Do I need to appoint a data protection officer?

As a rule, yes. Small-scale processing agents may be exempt, but they must keep a communication channel with data subjects (ANPD Resolution CD/ANPD 2/2022).