Brazil’s LGPD, or Lei Geral de Proteção de Dados, is a data protection law that came into effect in 2020. It governs how personal data is collected, processed, and stored by organizations, both in the public and private sectors. The law requires companies to obtain clear consent from individuals before processing their personal data, implement security measures to protect it, and provide transparency regarding how the data is used. LGPD grants individuals rights over their data, such as the ability to access, correct, or delete their information, and sets penalties for non-compliance.