Lei Geral de Proteção de Dados
Brazil's LGPD regulates processing of personal data in Brazil. It shares many concepts with the GDPR — legal bases, data subject rights and security — with its own requirements and authority (ANPD).
Example finding{
"rule": "lgpd.legal-basis",
"framework": "LGPD",
"severity": "high",
"file": "app/api/signup.ts",
"check": "Legal basis per processing activity",
"status": "failed",
"fix": { "available": true, "files": 2 }
}What LGPD expects from engineering.
- 01
Legal bases
Process personal data only under one of the legal bases the law defines.
- 02
Data subject rights
Confirm processing and support access, correction, anonymisation, portability and deletion.
- 03
Security measures
Adopt technical and administrative measures to protect personal data.
- 04
Incident communication
Communicate relevant security incidents to the ANPD and data subjects.
- 05
International transfer
Transfer data abroad only in the cases the law permits.
- 06
Sensitive data
Apply stricter conditions to sensitive personal data.
Turned into code rules.
- Legal basis per processing activity
- Data subject request endpoints
- Anonymisation utilities
- Sensitive data tagging
- Transfer region checks
Read the source.
RuleFix links to primary sources so you can check the requirements yourself. We are not affiliated with these bodies.
Cover more with the same workflow.
DPDP
GDPR
HIPAA
Ship AI-powered products
that are compliant by design.
Join developers building with RuleFix.