LGPD: Brazil's Law Reaches Your Foreign Company
Fines up to R$ 50 million per infraction
Por Lucas Ribeiro Cavalcante — OAB/CE 44.673
LGPD: Brazil's Law Reaches Your Foreign Company
Fines up to R$ 50 million per infraction
Por Lucas Ribeiro Cavalcante — OAB/CE 44.673
Your headquarters are in Lisbon, New York, or Berlin. You sell online to Brazilians. Suddenly you keep hearing about the LGPD. Does it really apply to you? Yes, it very likely does.
“
The LGPD follows the data subject, not your company. Your servers in Frankfurt, your CEO in California: irrelevant.
R$ 50 mi
Maximum fine per infraction if you ignore the LGPD. And the risk multiplies fast.
Offer goods to people in Brazil
Process data collected in Brazil
Employ staff located there
Article 3 of Law 13.709/2018 sets three triggers. Match just one and you are fully bound. A foreign e-commerce site with zero offices in Brazil can still be liable.
✘ Mito
Myth: no Brazilian office means the LGPD skips you
✓ Verdade
Truth: what matters is where your data subjects are located
Dica
Build a compliance program before regulators knock. Map your data, pick a legal basis, appoint a data officer, and document everything that holds up in Brazil.
Are there any exceptions to the LGPD?
Yes, narrow ones: purely personal, journalistic, artistic, academic use, or national security.
Protect your company from R$ 50 million risks. Get your LGPD compliance right for 2026.