This law came into force on August 16, 2020 and is adopted and enforced by the national data protection authority, Autoridade Nacional de Proteção de Dados (ANPD).
Create a data protection policy
- Purpose and methodology of data processing: Clarify to consumers the specific purpose of the data processing, how the data will be processed and the duration of the processing, including the criteria for determining that duration.
- Consumers' rights: Provide consumers with comprehensive information on how they can exercise their rights under data protection law, including the right to access, rectify and erase their data and the right to object to processing.
- Corporate identity and data transfer: Be transparent about whether and what data is shared with third parties. Specify under what circumstances and for what purposes this transfer takes place and how the security of the data is guaranteed.
Implement a Consent Management Platform (CMP)
The LGPD requires clear and informed consent from consumers before processing their data. Implement a Consent Management Platform (CMP) to manage consumer consent efficiently and in accordance with the requirements of the LGPD. This powerful platform will not only allow you to automate data collection, management and storage, but also ensure that all processes are in line with legal requirements for active consumer consent.- Compliance with opt-in requirements: Similar to the GDPR, the LGPD requires active consent from consumers for the collection, storage and management of their data. A CMP enables the implementation of these requirements through a clear and user-friendly opt-in method.
- Automated data collection: By implementing a CMP, you benefit from centralized and automated collection of consumer consent. This simplifies administration and helps to minimize sources of error and ensure data integrity.
Add a DSAR form for consumer requests
-
Improve accessibility: Post the DSAR form in a prominent location on your website to ensure it is easy to find for all users.
-
Offer alternative contact methods: In addition to the online form, a specific email address should also be provided for consumers to submit their privacy inquiries.
-
Inform consumers: Use consent banners and cookie policies to educate consumers about their rights and how to submit DSAR requests.
Right to information
Consumers have the right to check whether a company is processing their personal data. They also have access to this data in order to view its use and processing.
Right of access
Consumers can request access to their personal data stored by a company. This enables them to check the completeness and accuracy of the data.
Right to correction & deletion
Consumers have the right to have inaccurate or outdated personal data corrected. They can also request that a company deletes their data, provided there are no legal retention obligations to the contrary.
Right to opt-out
Consumers have the right to prohibit the sale of their personal data. They can also refuse targeted advertising and object to the use of their data for significant decisions based on automated profiling.
We implement the Usercentrics CMP for you
The implementation of a Consent Management Platform (CMP) offers companies numerous advantages when handling personal data and helps them to comply with the LGPD. A CMP enables the efficient and legally compliant management of user consent. It not only improves the transparency and understanding of data processing processes for users by providing clear information about opt-ins and opt-outs, but also optimizes the user experience and strengthens their trust. In addition, automating the consent process with a CMP saves time and reduces errors.
As data protection and digital analytics experts, we offer companies the implementation and configuration of the Consent Management Platform (CMP) from Usercentrics, the leading provider in Europe. Our expertise in data protection and digital analytics enables us to provide a customized solution that not only meets legal requirements, but also offers the highest opt-in rates and is optimally tailored to the specific needs and processes of your company.
