Brazil's Personal Data Protection Framework in the Oil and Gas Sector

Law 13.709 of 2018, known as the General Personal Data Protection Law (LGPD), has been fully applicable since August 2021 and provides guidelines for the correct processing of personal data in all sectors.

The sectors may present different demands due to several factors, such as business model; sectorial rules; competent authorities; risks related to personal data processing activities, such as data volume and the use of artificial intelligence; and the best practices of the stakeholders involved in the sector and related to the companies’ activities.