Compliance and cybersecurity: How to protect documentation
Discover how compliance and cybersecurity complement each other in protecting corporate documentation, with practical strategies.
GEDOC
24/06/2026
Knowledge · Data protection in Brazil
LGPD Brazil: Data protection in document management
Law No. 13,709/2018 (LGPD) regulates the processing of personal data in Brazil. Data on workers, contractors and partners needs a defined purpose, a legal basis and appropriate security measures.
In short
Key LGPD points to watch
For organisations operating in Portugal and Brazil, the GDPR and the LGPD are similar but not identical. The platform therefore has to apply rules by country.
01
Legal basis
Every data processing activity needs an identified legal basis, just as under the GDPR.
02
Sensitive data
Health data has enhanced protection. Record only what the purpose requires.
03
Data subject rights
Data subjects can request access to their data, its correction and its deletion. The process must therefore be ready to respond.
04
Data protection officer and incidents
You need to appoint a data protection officer. In addition, you must notify the ANPD of security incidents, where applicable.
Knowledge
Articles on the LGPD and GDPR
Data protection on contractor document management platforms, in Portugal and Brazil.
GDPR compliance in 2026: From intention to operational proof
In 2026, complying with the GDPR requires demonstrating effective control, traceability and evidence that data protection works in practice.
GEDOC
08/04/2026
How AISP helps
Rules by country, on the same platform
AISP configures profiles, permissions and rules by geography, so that the same platform meets each country’s requirements. We recommend a single model based on the strictest requirements, with local specifics added on top.
Frequently asked questions
Frequently asked questions
Does the LGPD apply to a Portuguese company?
It applies when you process data in Brazil or data on people located there, for example in local operations with Brazilian contractors. Confirm how it applies to you with your data protection officer.
Can we use the same rules in Portugal and Brazil?
As a baseline, yes: a single model with the strictest requirements keeps governance consistent. You then add the specifics of each law.
Who oversees the LGPD?
The National Data Protection Authority (ANPD). It is the authority you notify of security incidents, where applicable.
Do you operate in Portugal and Brazil?
Show us how you manage contractor documents in both countries today. We will then show you how to apply rules by geography on the same platform.