The European Commission has just released its draft adequacy decision for Brazil, recognizing the Lei Geral de Proteção de Dados (LGPD) as essentially equivalent to the General Data Protection Regulation (GDPR).
If formally adopted, this milestone would:
-
Simplify Data Transfers: Businesses would no longer need Standard Contractual Clauses (SCCs) or binding corporate rules for most EU–Brazil transfers.
-
Boost Trade and Growth: A secure legal framework for personal data flows would strengthen digital services, investments, and partnerships.
-
Elevate Brazil’s Global Standing: Reinforcing the LGPD as a world-class data protection law, placing Brazil among the leading global privacy players.
The draft acknowledges the strength of Brazil’s framework, including the powers of the Autoridade Nacional de Proteção de Dados (ANPD) and the rights of individuals to effective judicial redress.
Next Steps: The draft will be reviewed by the European Data Protection Board (EDPB), representatives of EU member states, and remains subject to scrutiny by the European Parliament.
