Control frameworkCompliance & Audit

LGPD (Brazil) policy template

Review this template's scope and control areas. Then, open it in the Verdictan console to adapt and test the configuration for your environment.

Map Brazil's General Data Protection Law controls for AI services that handle personal data. The template covers lawful bases, individual rights, data protection officer duties and incident reporting. Confirm reporting duties with Brazil's National Data Protection Authority and qualified counsel.

Use this template as a starting configuration and control map. It does not provide certification, legal advice or a compliance guarantee. Confirm your obligations, adapt the configuration and test every outcome before deployment.

Regions

BR

Source references

3 source references

Control areas

6 mapped control areas

Deployment options

Regulated SaaS, Sovereign region

Source frameworks, standards and obligations

Lei Geral de Proteção de Dados (Law 13,709/2018)ANPD Resolution CD/ANPD No. 15/2024 (Security Incident Communication)ANPD guidance on legal bases and data subject rights

Control areas mapped by this template

Data privacy
Consent management
Data subject rights
Incident response
Breach notification
Transparency

Deployment options

Regulated SaaS
Sovereign region

Adapt the template in three steps

1

Review the scope

Confirm that the regions, source references, control areas and deployment options fit your use case.

2

Adapt the configuration

Open the template in the Verdictan console. Set its policies, thresholds, routing and review requirements for your environment.

3

Test before deployment

Test each policy outcome. Confirm that allowed, redacted, blocked and reviewed requests behave as expected.