// Privacy
Lei Geral de Proteção de Dados Compliance Software
Brazil's general data protection law governing the processing of personal data and the rights of data subjects.
Framework at a glance
Short name
LGPD
Version
2020
Category
Privacy
Controls
34
What LGPD covers
34 controls across 6 domains — every one tracked, owned and evidenced in Cyber Horizon.
Legal Bases and Principles
9 controls- LGPD-01 Processing Principles
- LGPD-02 Data Minimisation and Purpose Limitation
- LGPD-03 Legal Bases for Personal Data
- LGPD-04 Legal Bases for Sensitive Data
- LGPD-05 Consent
Rights of Data Subjects
8 controls- LGPD-10 Confirmation and Access
- LGPD-11 Correction of Data
- LGPD-12 Anonymisation, Blocking or Deletion
- LGPD-13 Data Portability
- LGPD-14 Deletion of Consent-Based Data
Governance and Accountability
6 controls- LGPD-18 Data Protection Officer (Encarregado)
- LGPD-19 Records of Processing Operations (ROPA)
- LGPD-20 Data Protection Impact Report (RIPD)
- LGPD-21 Governance Programme and Good Practices
- LGPD-22 Controller and Operator Responsibilities
Security and Incidents
5 controls- LGPD-24 Technical and Administrative Security Measures
- LGPD-25 Security Standards and Privacy by Design
- LGPD-26 Processing Agent Security and Confidentiality
- LGPD-27 Security Incident Communication
- LGPD-28 Breach Records and Risk Assessment
International Transfer
3 controls- LGPD-29 International Data Transfer
- LGPD-30 Adequacy and Standard Contractual Clauses
- LGPD-31 Transfer Safeguards and ANPD Authorisation
ANPD and Enforcement
3 controls- LGPD-32 Cooperation with the ANPD
- LGPD-33 Administrative Sanctions Readiness
- LGPD-34 Termination of Processing and Data Elimination
How Cyber Horizon automates LGPD
Every LGPD control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.
Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.
Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.
Frequently asked questions
What is Lei Geral de Proteção de Dados?
Brazil's general data protection law governing the processing of personal data and the rights of data subjects.
How many controls does Lei Geral de Proteção de Dados have?
Lei Geral de Proteção de Dados (2020) has 34 controls in Cyber Horizon's catalogue, organised across 6 domains.
How does Cyber Horizon help with Lei Geral de Proteção de Dados?
Cyber Horizon maps Lei Geral de Proteção de Dados into a shared control library alongside every other framework you run, so evidence collected once counts towards LGPD and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.
More Privacy frameworks
See LGPD mapped to your environment
Start with the free 20-question readiness check — no signup — or get a personal walkthrough of LGPD in Cyber Horizon.