Brazil
Lei Geral de Proteção de Dados (LGPD)
Brazil's LGPD classifies biometric data as sensitive personal data and provides strong protections similar to GDPR. Processing requires explicit consent or falls under limited exceptions. Brazil has seen growing use of facial recognition in public security and retail, leading to active enforcement by ANPD. Several Brazilian cities have debated bans on facial recognition in public spaces.
Key Provisions
- Biometric data is sensitive personal data under Article 11
- Processing requires specific, highlighted consent from the data subject
- Data minimization: only collect what is strictly necessary
- ANPD can require data protection impact assessments
- Data subjects must be informed about the specific purpose of biometric collection
- International data transfers require adequate protection or specific consent
Your Biometric Rights
- Right to confirm existence of processing
- Right to access personal data
- Right to correct incomplete or inaccurate data
- Right to anonymization, blocking, or deletion of unnecessary data
- Right to data portability
- Right to revoke consent
Penalties for Non-Compliance
Up to 2% of company revenue in Brazil, capped at R$50 million (~$10M USD) per infraction. ANPD can also impose daily fines, publicize infractions, block or delete data, and suspend processing activities.
What We Do Here
We file opt-out requests on your behalf with the face search engines we support, and re-file as necessary. LGPD Article 18 gives residents of Brazil the right to have their personal data deleted. We file through each engine's own opt-out process rather than under the LGPD, and a complaint to the ANPD is yours to make.
Get Protected