LGPD in Brazil: consent, ANPD expectations, and multilingual notices
Brazil’s LGPD looks familiar to GDPR teams, but ANPD guidance, Portuguese notices, and children’s rules still catch global brands off guard.
The Lei Geral de Proteção de Dados (LGPD) sets out lawful bases similar to GDPR, including consent and legitimate interest. ANPD has been increasingly active on cookies, incident response, and international transfers.
If you serve Brazilian users, Portuguese-language notices and an easy withdrawal path are not optional extras. Consent must be free, informed, and unambiguous — and you must keep records.
Practical CMP setup
Geolocate carefully, show the correct policy version, and do not reuse an EU banner verbatim. Map LGPD purposes to the same vendor graph you use for GDPR so one SDK can enforce both.
Educational overview only — not legal advice. Confirm requirements with counsel for your products and markets.
