Privacy & Data Protection

Automate LGPD compliance

LGPD (Brazil) · Lei Geral de Protecao de Dados

Brazil's General Data Protection Law establishing rules on collection, handling, storage, and sharing of personal data, with enforcement by the ANPD.

32 controls24/7 continuous monitoring

Book a Demo All frameworks

LGPD

Overview

What is LGPD?

Brazil's General Data Protection Law establishing rules on collection, handling, storage, and sharing of personal data, with enforcement by the ANPD.

Who it applies to

Organisations processing personal data in Brazil, or the data of people in Brazil while offering goods and services there. Extraterritorial in the same way the GDPR is.

How the standard is organised

Closely modelled on the GDPR - legal bases for processing, data subject rights and a data protection officer - supervised by the national data protection authority.

Framework names, marks and abbreviations (ISO, SOC 2, PCI DSS, TISAX, HIPAA, GDPR and others) are trademarks of their respective standards bodies and are used here only to describe what the Bitkosh Compliance Management Platform helps you track and prepare for. The badges shown are original Bitkosh artwork, not the official marks. Bitkosh Technologies is not affiliated with, sponsored by, or endorsed by ISO, AICPA, the PCI Security Standards Council, ENX/VDA, or any other framework owner, and using this platform does not by itself confer or guarantee certification — certification/attestation is granted only by the relevant accredited third-party body.

On the platform

LGPD on the Bitkosh platform

The 32 LGPD controls sit in one workspace, evidence is collected from the systems you already run, and shared controls satisfy the equivalent requirement in the other 34 frameworks at the same time — so a second framework costs a fraction of the first.

How the platform works

Frequently Asked Questions

Who publishes LGPD, and who does it apply to?

LGPD is published by Brazil - Lei Geral de Proteção de Dados. Organisations processing personal data in Brazil, or the data of people in Brazil while offering goods and services there. Extraterritorial in the same way the GDPR is.

How is LGPD conformance demonstrated?

Enforced by a regulator - demonstrated, not certified. There is no certificate to obtain. Conformance is shown through mapped controls and retained evidence, and tested by a regulator or a counterparty rather than an auditor you appoint.

How is LGPD structured?

Closely modelled on the GDPR - legal bases for processing, data subject rights and a data protection officer - supervised by the national data protection authority. Bitkosh tracks 32 LGPD controls against it, each with its own evidence requirements, owner and review cadence.

Let's build together

Ready to automate LGPD?

See how the Bitkosh Compliance Management Platform gets you audit-ready for LGPD and 34 other frameworks from a single control library.

Book a Demo Send an enquiry