Compliance

Insight: Both regulations align on lawful basis and purpose limitation. GDPR imposes stricter accountability and consent granularity (Art. 5, Art. 7).

Insight: Article 18 LGPD (BR) and Articles 15–22 GDPR (EU). Portability and automated-decision rights show the largest implementation gap.

Insight: LGPD Art. 52: fines up to 2% of revenue, capped at BRL 50M per infraction, plus daily penalties.

Insight: LGPD Art. 33 / GDPR Ch. V. Standard Contractual Clauses (SCCs) remain the dominant safeguard post-Schrems II.

Insight: Active consent tracking is required by LGPD Art. 8 §5 and GDPR Art. 7(3). Withdrawal must be as easy as granting.

Insight: DPIA (Art. 35 GDPR) and Privacy by Design (Art. 25) drive the largest implementation gap — prioritize controls there.