HighlightsPrivacy espresso seriesResourcesSeptember 19, 2024The ANPD’s new regulation on international data transfers

maxresdefault

In this latest episode of the PrivacyRules privacyespresso series, we explore the critical developments in international data transfers as outlined by the Brazilian Data Protection Authority (ANPD) with insights from Igor Baden Powell, lawyer at TozziniFreire Advogados, PrivacyRules Brazilian law firTm member.

The ANPD has recently released new regulations that provide additional details and requirements on international data transfers, building on Brazil’s General Data Protection Law (LGPD). This episode offers important guidance for companies operating in Brazil or transferring data to third countries.

Key topics :
– International data transfers vs. Data collection: Understand the difference between transferring data abroad versus collecting it internationally, and how these distinctions impact compliance with the LGPD.
– LGPD’s extraterritorial scope: Similar to the GDPR, the LGPD has an extraterritorial reach, meaning it applies to companies outside Brazil that process data of individuals located in Brazil.
– Compliance mechanisms: Companies must ensure compliance through mechanisms such as adequacy decisions, Binding Corporate Rules (BCRs), Standard Contractual Clauses (SCCs), and consent. However, Brazil is yet to issue an adequacy decision.
– Practical compliance measures: Igor shares essential steps for companies to take, including conducting data mappings, updating privacy policies, preparing international data transfer policies, and implementing training for key departments.
– Timeline for compliance: The resolution is already in effect, but companies relying on contractual clauses for data transfers have a 12-month period to adopt the ANPD-approved SCCs in their contracts.

This episode is essential for businesses involved in international data transfers or operating under Brazil’s LGPD. Don’t wait to get up to speed on these new requirements to ensure compliance and mitigate potential risks.
Listen now for expert advice on how to adapt your data protection practices to meet the evolving regulatory landscape.

Listen to the full episode : https://bit.ly/47xxSf2