Provisional Measure No. 869/18 Creates The Brazilian Data Protection Authority And Amends Several Articles Of The Brazilian General Data Protection Law

On May 28, 2019, Provisional Measure No. 869/18 was approved by the Brazilian Chamber of Deputies, promoting amendments to several articles of the Brazilian General Data Protection Law (in Portuguese, Lei Geral de Proteção de Dados - LGPD - Law No. 13,709/2018), enacted in August 2018; and created the Brazilian Data Protection Authority (Autoridade Nacional de Proteção de Dados - ANPD). On the following day, on May 29, 2019, the Provisional Measure was transformed into Conversion Bill No. 7/2019, as a result of the alterations made in the Chamber of Deputies, being also approved in the Federal Senate.

In Conversion Bill No. 7/2019, the creation of the National Data Protection Authority (ANPD) was maintained, however, its nature was determined to be transitory, and it may be transformed by the Executive Branch, within two (2) years, into an entity of the Indirect Public Administration, subject to a special autarchic regime and linked to the Presidency of the Republic. The structure given by MP 869/2018 to the ANPD was, therefore, preserved.

In addition to the creation of the ANPD, the Conversion Bill also maintained the deadline for the LGPD to enter into force as of August 2020.

The main changes brought by Conversion Bill No. 7/2019 are:

The Data Protection Officer (DPO), who previously had no qualification requirements, must now have legal and regulatory...