Legal information, not legal advice. Every jurisdiction page carries its verification status and sources.

Enforcement · 14 January 2026

ANPD opens enforcement sweep on LGPD basics

Brazil's data protection authority targets controllers operating without a published privacy notice or a designated data protection officer.

medium impactBrazil

What changed

The ANPD has signalled that its early sanctions focus on foundational compliance rather than sophisticated processing questions. Publishing a notice and identifying an encarregado remain the two most effective mitigation steps.

Why this is marked medium impact

Narrower or procedural effect, or a change that only bites in specific circumstances. Impact is our editorial read of scope, not a legal opinion on how the change affects you.

Check this against the source

We summarise developments so they are scannable, which necessarily loses detail. Before you rely on this, read the instrument itself.

ANPD

Found something out of date on this entry?

Corrections are reviewed against the primary source before anything changes.

Report a correction