President Promulgates 'Key Changes To The Final Version Of The LGPD'

The President of the Federative Republic of Brazil, Jair Bolsonaro, promulgated, on 8 July 2019, Law No. 13.853 of 8 July 2019, Amending Law No. 13.709 of 14 August 2018 ('LGPD'), to Provide for the Protection of Personal Data and for the Creation of the National Data Protection Authority ('ANPD'), and Other Provisions ('the Amending Law'). In particular, the Amending Law approves certain provisions introduced by Provisional Measure No. 869 of 27 December 2018, including the competences and the structure of the ANPD, among other things.

Luis Fernando Prado Chaves and Renato Gomes Malafaia, Partner and Attorney at Law at Daniel Law respectively, told OneTrust DataGuidance, "if we had to elect some of the main amendments to the original text, we would emphasise [...] that unlike the General Data Protection Regulation (Regulation (EU) 2016/679), under the LGPD, [...] all companies responsible for processing data (as controllers) have to appoint a data protection officer, at least until the ANPD regulates the exceptions. [In addition,] data subjects no longer have the right to request a human revision of decisions made strictly through automated proceedings [...], subsequent processing of publicly accessible personal data may be carried out for new purposes, provided that these purposes are legitimate, specific, and observe the rights of data subjects, as well as the grounds and principles set forth in the LGPD [...] Therefore, despite the absence of alteration in the backbone of the law [...], there were some key changes to the final version of the LGPD [...]"

We expect the ANPD to act independently from any political power or beliefs

The Amending Law further provides the ANPD with the authority to, among other things, supervise and ensure compliance with the LGPD, receive and process...