What does Brazil · LGPD (Lei 13.709/2018) cover?

Processing records, accountability & incidents. It applies to: Controllers/operators of Brazilian personal data.

What does the Regulayer pack for Brazil · LGPD (Lei 13.709/2018) prove?

Records of processing, accountability signals, and security-incident detail. The record is signed and tamper-evident, and anyone can verify it free, without an account.

Regulayer / The 146 laws / Privacy law

Brazil · LGPD (Lei 13.709/2018)

Processing records, accountability & incidents.

Applies to: Controllers/operators of Brazilian personal data. Built · in force

What the signed record shows

Records of processing, accountability signals, and security-incident detail.

The proof is a signed, tamper-evident record. Anyone can check it, free, without an account, and nothing has to leave the building to make it. Evidence, not a promise.

Citation: Arts 37/48/6,X/46; Res. CD/ANPD 15/2024

In the same family

GDPR · Article 22Safeguards on automated decisions HIPAA · Security RuleAudit controls over ePHI Illinois · BIPABiometric consent & handling

What to do about it

Seven days free, then $349 a month.

A signed record of which AI you used and what you checked, sealed to the exact file you deliver, made on your own machine and checkable free by anyone you send it to.

Start the free week Or verify a real record, free →

Part of the Regulayer proof catalogue: 146 laws and standards, one sealed engine. This page is a product description, not legal advice.

What the statute requires, section by section

Lei nº 13.709, de 14 de agosto de 2018, Lei Geral de Proteção de Dados Pessoais (LGPD). Provisions addressed:

Art. 37: Record of processing operations (registro das operações de tratamento): the controller and operator keep records of processing operations.
Art. 48: Communication of a security incident to the ANPD and to data subjects where the incident may cause relevant risk or harm.
Art. 6, X: Accountability (responsabilização e prestação de contas): demonstration of effective measures proving compliance.
Art. 46: Security measures to protect personal data. The ANPD incident-communication regulation (Resolução CD/ANPD nº 15/2024) requires communication to the ANPD within 3 business days of awareness.

Taken from the Regulayer entry for this instrument, which is built against the primary text.