BRASIL

On July 10, the Brazilian government enacted the law creating the National Personal Data Authority (ANDP), after a process where several of the initial articles were vetoed. The new entity has been entrusted with the responsibility of guaranteeing the application of the General Personal Data Protection Law, which will enter into force in 2020. 

The articles vetoed by the Executive Branch included one obliging automated decisions to be reviewed at the request of physical persons when this concerns their own data as well as another increasing penalties for violating the law, and an article setting requirements regulating data processing. 

The ANDP’s duties include drawing up the guidelines for the National Policy on Data Protection and Privacy, supervising compliance and applying sanctions in the case of non-compliance, and analyzing possible complaints presented by users about irregularities.