Table of Contents
The LGPD (Lei Geral de Proteção de Dados) is Brazil’s comprehensive data protection law, enacted to safeguard individuals’ personal data. Understanding the rights it grants to data subjects is essential for organizations and individuals alike.
Key Data Subject Rights Under LGPD
The LGPD establishes several rights for individuals, known as data subjects, regarding their personal data. These rights aim to give people more control over how their data is collected, used, and stored.
Right to Confirmation and Access
Data subjects have the right to confirm whether their personal data is being processed and to access that data. They can request details about the data’s origin, purpose, and sharing practices.
Right to Correction
If personal data is inaccurate or incomplete, individuals can request corrections to ensure their data is accurate and up-to-date.
Right to Data Deletion
Data subjects can request the deletion of their personal data, especially when it is no longer necessary for the purpose it was collected or if they withdraw consent.
Right to Data Portability
This right allows individuals to obtain their data in a structured, commonly used format and transfer it to another service provider if they wish.
Right to Information
Data subjects must be informed about the collection and processing of their personal data, including the purpose, scope, and duration of use.
Responsibilities of Organizations
Organizations handling personal data must respect these rights and implement processes to facilitate their exercise. They are also required to inform data subjects about their rights and how to exercise them.
Conclusion
The LGPD empowers individuals with rights that promote transparency and control over personal data. Organizations must comply with these provisions to build trust and ensure legal compliance in Brazil’s data landscape.