Regulatory Standards · Brazil
Lei Geral de Proteção de Dados
LGPD security, evidenced for the ANPD.
Brazil's LGPD requires security measures that protect personal data from unauthorised access and incidents. Astragar maps those measures to the data, systems and controls that matter.
Register interest in LGPDComing to Astragar GRC
2%
Of Brazilian revenue per infraction, capped at R$50 million
3 days
Business days to report qualifying security incidents to the ANPD
ANPD
National Data Protection Authority enforces the law
What LGPD requires
The obligations, in brief.
Legal basis
Process personal data only under one of the law's legal bases.
Security measures
Technical and administrative measures to protect personal data.
Incident reporting
Report incidents that may cause relevant risk or damage to data subjects.
Data subject rights
Access, correction, deletion and portability on request.
How Astragar helps
From checklist to measurable risk.
01
Requirement → control mapping
Map every LGPD requirement to controls, systems, assets and owners.
02
Evidence, continuously
Collect and maintain evidence, with sign-off from contributor to IT auditor, CISO and executive office.
03
Exposure behind the gaps
See which vulnerabilities and sensitive data put LGPD controls at risk.
04
Risk in financial terms
Prioritise remediation by business and financial impact, not checklist order.
Find where Brazilian personal data lives and which gaps expose it, before an incident forces the question.
Sign-off workflow
Evidence Contributor
→IT Auditor
→CISO
→Executive Office
Find the data. Test the controls. Reduce the risk.
LGPD mapping is coming to Astragar GRC. Talk to us about early access and how your existing evidence already applies.
Talk to usAstragar supports compliance programmes with technical evidence and risk analysis. It does not provide legal advice or issue certifications.
See your cyber risk in $ terms, not CVSS scores.
