Brazil: New National Authority for Data Protection in Brazil, and changes to General Data Protection Act

On August 2020 Executive Order #869/2018 will come into effect through which the National Authority for Data Protection (NADP) is created, and the Brazilian General Data Protection Act is amended.

The NADP will have a key role in the process of enforcing and formalizing Brazilian Data Protection regulations.

Additionally, for the first 2 years, the NAPD  will potentially hold technical and decision-making autonomy. However, the NADP may later become an independent regulatory agency.

Regarding the coming changes in regulation, we can highlight that the deadline for companies to comply will be August 2020.