Does Brazil's LGPD Apply to U.S. Companies? A Practical 2026 Guide
A practical starting point for U.S. and other foreign companies assessing whether Brazil's LGPD applies to their operations.
Read guide →
Built for implementation
Not just legal theory
This library is organized around the questions global businesses actually need to answer: Does the LGPD apply? Which legal basis fits? What should be in the ROPA? How should vendors be classified? Which transfer mechanism applies? How long should data be retained? What security controls are expected?
Each guide connects legal requirements with operational implications, examples, checklists, official sources and practical next steps.
25Practical guides
5Topic clusters
2026Current regulatory context
100%Focused on Brazil's LGPD
Start here
Featured LGPD Guides
High-value entry points for foreign businesses building or reviewing an LGPD compliance program.
LGPD Compliance Checklist for Foreign Companies: 25 Things to Review
A 25-point review covering scope, governance, legal bases, rights, vendors, transfers, security and implementation evidence.
Read guide →LGPD International Data Transfers: A Practical Guide for Global Businesses
A complete guide to Article 33 mechanisms, exporters/importers, SCCs, adequacy and cross-border processing.
Read guide →How to Build an LGPD Data Map: Step-by-Step Guide
A step-by-step method for mapping systems, data categories, purposes, vendors, countries, retention, rights and risk.
Read guide →LGPD Security Requirements: What Businesses Are Expected to Do
A risk-based guide to Articles 46–49, technical and administrative safeguards, vendors, cloud and incident readiness.
Read guide →Brazil Recognizes the EU as Adequate: What It Means for International Data Transfers
What the 2026 Brazil–EU mutual adequacy framework changes for SCCs, DPAs, cloud chains and transfer registers.
Read guide →
Browse by topic
Explore the LGPD by Compliance Area
The guides stay published directly under /blog/; categories organize the knowledge architecture without making article URLs deeper.
LGPD for Global Businesses
Understand when Brazil's LGPD applies to foreign companies and how it compares with the GDPR.
Explore cluster →
Compliance & Implementation
Turn legal requirements into operational records, legal-basis decisions, vendor controls, retention and governance.
Explore cluster →
Digital Business & Marketing
Practical LGPD guidance for SaaS, ecommerce, Shopify, mobile apps, cookies, CRM, advertising and remarketing.
Explore cluster →
International Data Transfers
Article 33 mechanisms, Brazilian SCCs, adequacy decisions and cross-border vendor chains.
Explore cluster →
Security, Rights & Governance
Security, incidents, privacy notices, rights, DPO requirements, sanctions and accountability.
Explore cluster →
Topic Cluster
View category
LGPD for Global Businesses
Understand when Brazil's LGPD applies to foreign companies and how it compares with the GDPR.
Topic Cluster
View category
Compliance & Implementation
Turn legal requirements into operational records, legal-basis decisions, vendor controls, retention and governance.
- 13The 10 Legal Bases Under Brazil's LGPD Explained
- 14Legitimate Interest Under LGPD: When Can Your Business Use It?
- 15LGPD Vendor Compliance: What to Check Before Using a Processor
- 19How to Build an LGPD Data Map: Step-by-Step Guide
- 20LGPD ROPA: How to Build a Record of Processing Activities
- 21LGPD Data Retention: How Long Should Personal Data Be Kept?
- 25Controller vs Operator Under LGPD: A Practical Business Guide
Topic Cluster
View category
Digital Business & Marketing
Practical LGPD guidance for SaaS, ecommerce, Shopify, mobile apps, cookies, CRM, advertising and remarketing.
- 04Brazil LGPD for SaaS Companies: Practical Compliance Guide
- 05LGPD for E-Commerce: What Online Stores Selling to Brazil Need to Know
- 07LGPD Cookie Consent Requirements: Analytics, Pixels and Advertising
- 16LGPD for Marketing Teams: Email, CRM, WhatsApp, Pixels and Remarketing
- 17LGPD for Shopify Stores Selling to Brazil: 2026 Compliance Guide
- 18LGPD for Mobile Apps and Digital Platforms: A Practical Compliance Guide
Topic Cluster
View category
International Data Transfers
Article 33 mechanisms, Brazilian SCCs, adequacy decisions and cross-border vendor chains.
Topic Cluster
View category
Security, Rights & Governance
Security, incidents, privacy notices, rights, DPO requirements, sanctions and accountability.
- 08Does Your Company Need an LGPD DPO? Brazil's Encarregado Rules Explained
- 09LGPD Data Breach Notification: When and How Companies Must Respond
- 10LGPD Privacy Policy Requirements for Foreign Websites
- 11LGPD Data Subject Rights: How Companies Should Handle Access, Deletion and Correction Requests
- 12LGPD Fines and Penalties: How Much Can Companies Be Fined in Brazil?
- 22LGPD Security Requirements: What Businesses Are Expected to Do
Need More Than Articles?
The Brazil LGPD Compliance Playbook — 2026 Edition turns the guidance in this knowledge hub into a practical implementation system with a 100-point compliance audit, 16 worksheets and a structured 30-day implementation roadmap.
81-page guide
100-point audit
16 implementation worksheets
30-day roadmap
Get the Brazil LGPD Compliance Playbook · $47
Editorial approach: LGPD Brazil is an independent educational project.
Guides prioritize the current compiled LGPD, ANPD regulations and guidance, and other primary official sources whenever possible.
Articles distinguish legal requirements from operational recommendations and are updated as the Brazilian regulatory framework evolves.
Nothing on this website constitutes legal advice.