On October 4, 2021, the Brazilian Data Protection Authority (ANPD) published a guide and a checklist on information security measures for small data processing agents. The guide covers measures such as contract management, information security policy and access controls. Such measures are necessary for the fulfillment of the security principle in the Brazilian General Law

On August 30, 2021, the Brazilian Data Protection Authority (ANPD) published a draft resolution on the application of the Brazilian General Data Protection Law (LGPD) for small businesses that process personal data. The draft presents exemptions with respect to several obligations provided for in the LGPD, especially for microenterprises, small businesses, startups and non-profit legal