Brazil LGPD
compliance
Brazil's Lei Geral de Proteção de Dados (LGPD) gives Brazilians GDPR-style rights over their personal data. If your site reaches Brazil, one of the world's largest internet audiences, cookies and trackers need a lawful basis.
Trusted by 2,000+clients worldwide
LGPD at a glance
In force
Since September 2020, with administrative sanctions applicable from August 2021.Law No. 13,709/2018
Who it protects
Individuals in Brazil, wherever the processing organization is based.Extraterritorial, like GDPR
Regulator
The ANPD (Autoridade Nacional de Proteção de Dados) supervises and sanctions.
Fines up to
2% of Brazil revenue, capped at R$50 million per violation.Plus daily fines and bans
This guide is general information for site owners, not legal advice. Check the current text of the law and your own counsel for your situation.
What the law requires on your website
A lawful basis
LGPD lists ten legal bases; for advertising cookies and cross-site tracking, consent is the practical basis: free, informed and unambiguous.
Transparency
Visitors must know what data is collected, why, and who receives it, in clear language and realistically in Portuguese.
Data-subject rights
Brazilians can access, correct and delete their data and revoke consent. Your consent layer must make revocation as easy as consent.
How Clickio Consent helps
Serve visitors from Brazil a consent flow configured for the LGPD: a localized dialog, granular purposes, equal-weight decline and stored records.
One tag, per-region rules
Clickio detects each visitor's location and serves the consent experience you configure for that region, this law included, without affecting any other market.
Multi-regulation →Localized dialogs
Language auto-detection and full text customization put the dialog in your visitors' language, with granular purpose choices and equal-weight decline.
Customization →Evidence on file
Every choice is stored as a consent record: the demonstrable-consent trail modern laws place on the controller.
Reporting →Frequently asked questions
Does LGPD apply to my non-Brazilian company?
Yes, if you process data of people in Brazil or offer them goods and services. The law applies by audience, not by company location, much like GDPR.
Is a cookie banner required under LGPD?
The LGPD doesn't use the word "banner", but consent for non-essential trackers must be free, informed and unambiguous, which in practice means a real consent dialog, not implied consent.
Can I reuse my GDPR setup for Brazil?
Largely, yes: the concepts map closely. With Clickio you serve Brazilian visitors a localized, LGPD-appropriate consent flow from the same tag and configuration that handles GDPR in Europe.
Does the dialog need to be in Portuguese?
Transparency implies language visitors understand. Clickio auto-detects language, so Brazilian visitors see the dialog in Portuguese by default.
How do I evidence LGPD consent?
Clickio stores a consent record for every choice: the accountability evidence the ANPD's framework expects controllers to keep.
Explore other regulations
Every guide shows how the same Clickio tag serves the right consent experience for that market. Pick the next one that applies to your audience.
Add this market to your consent setup. Start with a 14-day free trial; per-region settings and multi-language dialogs start on Starter.
Per-region settings (own texts, choices and fallback) and multi-language dialogs start on the Starter plan.