Brazil's Lei Geral de Proteção de Dados (LGPD) applies to any organization that processes personal data of individuals in Brazil — regardless of where the organization is based. If your website serves Brazilian users, collects their data, or offers goods/services to Brazil, you're in scope.

ANPD (Brazil's National Data Protection Authority) can impose fines of up to 2% of annual revenue in Brazil (capped at BRL 50 million per infraction). Additional sanctions include daily fines, public disclosure of violations, data processing suspension, and partial/total database deletion.

The Encarregado is the LGPD equivalent of a Data Protection Officer (DPO). Every organization that processes personal data under LGPD must appoint an Encarregado and make their contact information publicly available — typically on the website. This person handles data subject requests and acts as the liaison with ANPD.

While inspired by GDPR, LGPD has key differences: 10 legal bases for processing (vs. GDPR's 6), mandatory Encarregado appointment, specific provisions for children's data requiring parental consent, unique penalty structure (2% revenue / BRL 50M cap), and ANPD as the sole enforcement authority. Our scanner checks LGPD-specific requirements.

The full LGPD report includes 12 compliance checks: privacy notice discovery (Portuguese), legal basis audit, data subject rights testing, Encarregado verification, cookie consent audit, sensitive data detection, children's data protections, international transfer audit, data breach preparedness, penalty calculation, compliance scorecard, and an AI-generated remediation plan. Price: €99.