See GovernIQ in action — unified governance & security in every language your business speaks.Book a demo
LGPDRegionalLATAM

Lei Geral de Proteção de Dados

Brazil's general data protection law — the LATAM equivalent of GDPR.

42 mapped controls

What it is

Brazil's Lei Geral de Proteção de Dados governs the processing of personal data, requiring a lawful basis, data-subject rights, breach notification, and a data protection officer. GovernIQ maps its requirements to operational controls and links them to your broader security program.

Who it applies to

  • Any organization processing personal data of individuals in Brazil
  • Controllers and processors across sectors
  • Multinationals with LATAM operations

How GovernIQ maps it

  1. 1

    Map data processing

    Identify processing activities and their lawful basis.

  2. 2

    Operationalize rights

    Translate data-subject rights into controls and workflows.

  3. 3

    Link to security

    Connect LGPD obligations to your security framework.

  4. 4

    Evidence readiness

    Keep breach-notification and DPO evidence current.

Sample control crosswalk

ControlMapped across frameworks
Data protection
LGPD Art. 46ISO A.5.34NIST PR.DS-1
Breach notification
LGPD Art. 48ISO A.5.24NIST RS.CO-2