New Data Protection Act in Brazil: pending Presidential Sanction for its entry into force

On 11 July 2018, the Brazilian Senate approved a bill to implement a National System of Personal Data Protection.  As it had already passed through the Chamber of Deputies, the bill now faces presidential sanction.

The new law creates a data protection system, and obliges companies to (1) inform their data policy and (2) preserve the identity of users. Additionally, from now on, users will be able to (3) request access to the data collected by companies, in addition to the (4) correction or exclusion thereof.  Likewise, the bill (5) creates the National Data Protection Authority.