LGPD (Brazil) Compliance Advisor
Run LGPD gap assessments, choose legal bases, handle sensitive data and data-subject rights, plan DPO appointment and ANPD breach notification, and draft Brazilian privacy policies and DPIAs.
Brazil's LGPD mirrors GDPR but answers to its own regulator, the ANPD — with fines up to 2% of revenue (R$50M per violation). If you process the data of anyone in Brazil, "we follow GDPR" doesn't automatically cover you.
Who it's for: companies processing personal data of people in Brazil, privacy and legal teams expanding into LATAM, DPOs (encarregados) standing up an LGPD program, teams comparing GDPR and LGPD obligations, founders launching Brazilian operations
Example
"Run an LGPD gap assessment and map our legal bases for processing" → A prioritized gap report, legal-basis mapping per activity, an ANPD breach-notification procedure, and a Brazil-specific privacy policy draft
CLAUDE.md Template
New here? 3-minute setup guide → | Already set up? Copy the template below.
# LGPD Compliance Skill
You are an expert Brazilian data protection advisor with deep knowledge of the **Lei Geral de Proteção de Dados Pessoais (LGPD)** — Law No. 13,709/2018, as amended by Law No. 13,853/2019 — and the regulations and guidance issued by the **Autoridade Nacional de Proteção de Dados (ANPD)**. You assist legal, compliance, privacy, and engineering teams operating in Brazil or handling Brazilian residents' personal data.
## How to Respond
Identify the task type and match the appropriate output format:
| Task | Output Format |
|------|--------------|
| Gap assessment | Table: LGPD Requirement \| Current State \| Gap \| Priority \| Recommended Action |Get new playbooks like this one
One email a week with new Claude Code workflows. Free, like everything here.
No spam. Unsubscribe anytime.
What This Does
Turns Claude Code into an LGPD (Lei Geral de Proteção de Dados, Law 13,709/2018) compliance advisor for Brazil. It runs gap assessments, maps legal bases for processing, handles sensitive data and data-subject rights, plans DPO (encarregado) appointment and ANPD breach notification, drafts privacy policies and DPIAs for Brazilian operations, designs consent management, and compares LGPD with GDPR.
The Problem
LGPD looks like GDPR but has its own legal bases, its own regulator (ANPD), and its own enforcement and penalty regime (fines up to 2% of Brazilian revenue, capped at R$50M per violation). Companies assume GDPR compliance carries over and miss Brazil-specific requirements: ANPD breach notification, local DPO expectations, distinct legal bases, and international-transfer rules out of Brazil.
Quick Start
Step 1: Create Your Workspace
mkdir -p ~/Documents/LGPD-Compliance
Step 2: Download the Template
mv ~/Downloads/CLAUDE.md ~/Documents/LGPD-Compliance/
Step 3: Add Context (Optional)
Add your data inventory, GDPR documentation, vendor list, or current privacy policy.
Step 4: Run Claude Code
cd ~/Documents/LGPD-Compliance
claude
Step 5: Start
Say: "Run an LGPD gap assessment for our Brazilian operations."
Example Commands
"Run an LGPD gap assessment"
"Map a legal basis to each of our processing activities"
"How do we handle sensitive data under LGPD?"
"Build a data-subject rights fulfillment workflow"
"Create an ANPD breach-notification procedure"
"Do we need to appoint an encarregado, and what are their duties?"
"Draft a privacy policy for our Brazilian operations"
"Compare our LGPD and GDPR obligations and flag the differences"
What You Get
| Output | Contents |
|---|---|
| Gap Assessment | Article-level findings with risk priorities |
| Legal-Basis Map | The right basis per processing activity |
| Rights Workflows | Access, correction, deletion, portability, and more |
| ANPD Breach Procedure | Notification timeline and templates |
| Documents | Privacy policy, DPIA, consent framework |
Tips
- Don't assume GDPR coverage — map LGPD legal bases explicitly; they differ.
- Plan ANPD notification before an incident forces it.
- Localize the policy — Portuguese-language, Brazil-specific disclosures matter.
Important Disclaimer
This is a compliance support tool, not legal advice. LGPD interpretation evolves with ANPD rulemaking. Have qualified Brazilian privacy counsel review outputs before relying on them.