LGPD Brazil and WordPress

The “Marco Civil” and the Brazilian General Data Protection Law (LGPD)

In Complianz 5.4 we will add full support for the Civil Rights Framework for the Internet (the “Marco Civil”) and the Brazilian General Data Protection Law (LGPD), which came into force in 2020.

The Cookiebanner in Complianz Premium automatically recognizes Brazilian visitors and will ask for their consent if the WordPress website is going to set non-functional cookies. For non-intrusive statistics (such as Google Analytics configured in a privacy-friendly way) it is not necessary to ask for consent.

Cookie policy in Brazil

In the Brazilian cookie policy we made sure that you mention all the relevant privacy rights Brazilians have:

1. Confirmation of the existence of treatment;
2. Access to data;
3. Correction of incomplete, inaccurate, or outdated data;
4. Anonymization, blocking, or deletion of unnecessary, excessive, or processed data in disagreement with the provisions of the General Law for the Protection of Personal Data (LGPD);
5. Portability of data to another service or product provider, upon express request, in accordance with the regulations of the national authority, observing commercial and industrial secrets;
6. Deletion of personal data processed with the consent of the holder, except in the cases provided for in art. 16 of the General Law for the Protection of Personal Data (LGPD);
7. Information on public and private entities with which the controller shared data;
8. Information on the possibility of not providing consent and on the consequences of denial.

We also made sure that the cookie policy explicitly mentions that visitors also have the right to submit a complaint to the Brazilian Data Protection Authority (ANPD).

Privacy statement for the LGPD

The privacy statement has been updated in order to make it possible that you can not only use the legal grounds used in the EU and UK, but also the extra possibilities allowed by Brasilian law:

• It is necessary to carry out studies by a research body, ensuring, whenever possible, the anonymization of personal data.
• It is necessary for the regular exercise of rights in judicial, administrative, or arbitration proceedings.
• It is necessary for the protection of health, exclusively, in a procedure performed by health professionals, health services, or health authorities.
• It is necessary for credit protection

Other documents.

We also made some changes to our other documents, such as the Data Protection Agreement, and the Privacy Statement for Children. Questions specific to Brazil are labeled with the Brazilian flag.