Lei Geral de Proteção de Dados (LGPD)

The Brazilian General Data Protection Law (Lei Geral de Proteção de Dados (LGPD) regulates the collection, use, processing, storage, and transfer of personal data of Brazil data subjects.

The LGPD establishes principles and rules for processing personal data including:

• Issuing rules for how businesses and organizations collect, use, and protect personal data
• Changing existing Brazilian privacy laws to help increase accountability
• Establishing fines for businesses and organizations that violate the law
• Creating a Brazilian National Data Protection Authority (ANPD) to further oversee and issue guidance and clarification around the LGPD
• Providing a framework for the transfer of personal data collected within Brazil.

Furthermore, there are additional technical, organizational, and administrative requirements that controllers and processors are required to implement in order to protect personal data from unauthorized access, deletion, loss, control, modification, or any other improper or unlawful processing.

Atlassian has devoted significant resources towards ensuring our cloud products are designed in accordance with widely accepted standards and certifications. The LGPD is very similar to the GDPR, so most, if not all of Atlassian’s existing GDPR practices to address compliance will be applicable. We also offer an annex to our Data Processing Addendum with terms that cover compliance with the LGPD.

To learn more about our data practices, visit our Privacy Policy and Security Practices page.

For more information, contact us.