Support Centre

Brazil: Executive Decree establishing policy for personal data protection in accordance with LGPD published in Pernambuco Official Journal

Executive Decree 49.265 of 6 August 2020 on Instituting the State Policy for the Protection of Personal Data of the State Executive Branch in accordance with Law No. 13.709 of 14 August 2018, General Personal Data Protection Law (as amended by Law No. 13.853 of 8 July 2019) ('LGPD') was published, on 7 August 2020, in the Official Journal of the State of Pernambuco. In particular, Executive Decree 49.265, in accordance with the LGPD, establishes the State Policy for the Protection of Personal Data ('PEPDP'), outlining various principles, including purpose limitation for data processing, complying with data security practices, necessity, transparency, accountability, and non-discrimination, as well as guaranteeing data subjects' free access to their personal data. In addition, Executive Decree 49.265 provides for definitions such as sensitive personal data, outlines the governance and regulatory powers of the PEPDP such as approving rules for the protection of personal data, and regulates the processing or personal data and data sharing practices.

You can read Executive Decree 49.265, only available in Portuguese, here.