Digital Law

GDPR & LGPD

Advisory on compliance with the General Data Protection Regulation (GDPR) and the Brazilian General Data Protection Law (LGPD). Support in adapting processes, policies and documentation for companies processing personal data.

OA n.º 64089L | OAB/SP n.º 433.599

When it makes sense

  • Your company processes personal data of customers, employees or partners
  • You need to adapt internal processes to GDPR or LGPD requirements
  • You need to draft or review privacy policies and terms of use
  • You want to implement a data governance program
  • You received a data subject rights request

What is included

Compliance diagnostic (gap analysis)
Personal data flow mapping
Privacy policy drafting
Terms of use and consent drafting
Contract review with processors
Support in responding to data subject requests
Guidance for implementing technical measures
Team training and awareness

How it works

01

Diagnostic

Analysis of current situation, identification of gaps and compliance risks.

02

Planning

Priority definition and action plan for compliance.

03

Implementation

Documentation drafting, process review and implementation support.

04

Maintenance

Ongoing monitoring and updates according to regulatory evolution.

Information needed to start

  • Company activity description
  • Types of personal data processed
  • Processing purposes
  • Systems and tools used
  • Existing policies and documentation
  • Relevant organizational structure

Timeframes and influencing factors

Compliance timeline depends on company size, processing complexity and current compliance status. Full compliance projects may take several months.

Factors that may influence:

  • •Organization size and complexity
  • •Volume and sensitivity of processed data
  • •Current compliance status
  • •Available resources for implementation
  • •Need for technical changes

Frequently asked questions

Related Services

Digital Contracts

Terms of service, SaaS and software licensing.

Learn more

E-commerce

Legal framework for online stores and platforms.

Learn more

Cybersecurity

Incident response and NIS2 compliance.

Learn more

Need to make your company compliant?

Submit information about your activity for an initial compliance analysis.

The information provided is general and does not replace legal advice. Each situation requires its own analysis.

Open chat
WhatsApp (initial contact — no document sharing)