Cybersecurity Policy Report, Guidance on Data Protection Officers Offered in Brazil, (Dec 19, 2024)

By Tony Foley

Brazil’s National Authority for the Protection of Data (ANPD) released updated guidance today on the role of data protection officers (DPOs) as a complement to a regulation promulgated in July on responsibilities of DPOs under the country’s data protection law, Lei Gera de Protecçao de Dados Pessoai (LGPD).

The new rule details major aspects of the duties of DPOs, including provisions on the disclosure of their identity and contact information, the duties of data processing agents, and situations that involve conflicts of interest and how to resolve them (CPR, July 18). According to today’s ANPD announcement, the new guide focuses on the performance of the DPO, offering best practices for personal data processing agents and suggestions for procedures for the appointment of a DPO.

The 42-page guide may be accessed from the announcement but is available only in Portuguese.

News: InternationalLegislation DataPrivacy DataSecurity