LGPD (General Data Protection Law – Brazil)

Data Protection

What is the LGPD?

Law No. 13,709/2018, known as the General Data Protection Law or LGPD, regulates the processing of personal data in Brazil.

What is personal data?

Personal data is any information related to an identified or identifiable natural person, such as full name, CPF, driver’s license, ID, home address, email address, date of birth, image, geolocation, IP (Internet Protocol), among others.

Sensitive personal data refers to information related to racial or ethnic origin, religious beliefs, political opinions, membership in a union or an organization of a religious, philosophical, or political nature, as well as data concerning health, sex life, genetic or biometric data.

There is also personal data of children and adolescents, which receives special protection under the law. Their processing is only permitted when it respects the best interests of the child or adolescent.

Who are the data subjects?

The data subject is the owner of the information. In the case of Weiku, the data subject may be an individual customer or prospect, an individual supplier or service provider, a job applicant, an employee (including spouse/partner or dependent), a visitor to Weiku, users of its websites, tools, and applications, an individual lessor, or any other natural person who establishes a relationship with the company.

What is data processing?

According to Article 5, Item X of the LGPD, data processing refers to any operation carried out with personal data, such as: collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination, or extraction.