lgpd

Solid

Expert LGPD compliance advisor for Brazil's Lei Geral de Proteção de Dados (Law 13,709/2018). Use this skill whenever a user asks about LGPD, Brazilian data protection, ANPD, personal data processing in Brazil, data subject rights under Brazilian law, legal bases for processing, sensitive data handling, DPO appointment in Brazil, data breach notification to ANPD, LGPD penalties (fines up to 2% of revenue / R$50M), international data transfers from Brazil, Brazil-EU mutual adequacy (January 2026 — SCCs/BCRs no longer needed for Brazil-EU transfers), LGPD gap assessments, privacy policy drafting for Brazilian operations, DPIA under LGPD, consent management, or comparing LGPD with GDPR. Trigger for any Brazil privacy or data protection question even if LGPD is not named explicitly.

Data & Documents 780 stars 162 forks Updated 1 weeks ago MIT

Install

View on GitHub

Quality Score: 90/100

Stars 20%
96
Recency 20%
90
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# LGPD Compliance Skill > **Last verified:** 2026-07-03 You are an expert Brazilian data protection advisor with deep knowledge of the **Lei Geral de Proteção de Dados Pessoais (LGPD)** — Law No. 13,709/2018, as amended by Law No. 13,853/2019 — and the regulations and guidance issued by the **Autoridade Nacional de Proteção de Dados (ANPD)**. You assist legal, compliance, privacy, and engineering teams operating in Brazil or handling Brazilian residents' personal data. --- ## How to Respond Identify the task type and match the appropriate output format: | Task | Output Format | |------|--------------| | Gap assessment | Table: LGPD Requirement \| Current State \| Gap \| Priority \| Recommended Action | | Legal basis analysis | Structured analysis per Art. 7 / Art. 11 basis | | Policy/notice drafting | Full structured document with required LGPD elements | | Data subject rights | Step-by-step workflow with timelines | | DPIA / RIPD | Structured impact assessment template | | Breach response | Incident timeline with ANPD notification checklist | | Penalty exposure | Risk table citing Art. 52 sanctions | | General question | Clear concise prose with article citations | Always cite the relevant LGPD article (e.g., "Art. 7, IV" or "Art. 48, §1º"). Where LGPD compares to GDPR, note both similarities and key differences. --- ## LGPD Structure Overview ### Scope (Art. 3) LGPD applies to **any** processing of personal data of individuals located in Brazil, regardless of wher...

Details

Author
Sushegaad
Repository
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Created
4 months ago
Last Updated
1 weeks ago
Language
HTML
License
MIT

Similar Skills

Semantically similar based on skill content — not just same category

Code & Development Solid

digital-brasil

Use para LGPD, proteção de dados, Marco Civil da Internet, cookies, termos de uso, privacidade em apps e sites, direitos digitais, vazamento de dados, adequação LGPD. Ativa em "LGPD", "proteção de dados", "política de privacidade", "vazamento de dados", "cookies", "Marco Civil", "direito ao esquecimento".

5 Updated 1 weeks ago
AlissonSantos1
AI & Automation Solid

dpo-reporting

Data Protection Officer reporting discipline for Brazilian LGPD compliance. Covers the Registro de Operações (Art. 37), Relatório de Impacto à Proteção de Dados (RIPD, Art. 38), Data Subject Request response SLAs and tooling, incident notification to ANPD within the 72-hour window (Art. 48), and the signed-trail artifacts auditors expect. Use when designing the DPO dashboard, wiring DSR endpoints, writing incident playbooks, or preparing for an ANPD audit. Combines with compliance-lgpd (core) for the legal framework and with consent-lifecycle + pii-data-flow (core) for the underlying data.

3 Updated today
Canhada-Labs
AI & Automation Solid

vn-pdpl

Expert Vietnam Personal Data Protection Law (PDPL) compliance advisor for Law No. 91/2025/QH15 and implementing Decree 356/2025/ND-CP (effective January 1, 2026). Use this skill for gap analysis against the Vietnam PDPL, data subject rights fulfilment workflows, cross-border data transfer impact assessments, privacy notices and internal policies, breach notification procedures, sector-specific obligations (finance, AI, cloud, blockchain), and DPO qualification reviews. Trigger whenever a user mentions Vietnam data privacy, VN-PDPL, Nghị định 356, Vietnamese personal data, or cross-border transfers involving Vietnamese citizens' data.

780 Updated 1 weeks ago
Sushegaad