The European Commission published on September 5th of 2025, the draft of Brazil’s adequacy decision on personal data protection, which recognizes the level of protection guaranteed by the Brazilian legal system. At the same time, the Brazilian National Data Protection Authority (ANPD) has already confirmed that it will issue an adequacy decision from the European Union, in reciprocity.
Brazil will be the third country in Latin America, after Argentina (2003) and Uruguay (2012), to obtain this recognition.
In practical terms, this means that international transfers of personal data between Brazil and European Union member countries will be able to occur more efficiently, without the need for additional measures, such as the adoption of Standard Contractual Clauses (SCCs), required by the General Data Protection Law (LGPD) and Resolution CD/ANPD No. 19/2024.
International transfers to other countries, such as the United States, will still need these measures to comply with local legislation.
The adequacy decisions are expected to be signed shortly.
- Access the draft of Brazil’s adequacy decision:
https://commission.europa.eu/document/f5aee532-70bf-41b1-a94a-8e294a528f6a_en
- Access the ANPD website on International Transfers:
https://www.gov.br/anpd/pt-br/assuntos/assuntos-internacionais/international-affairs
Please contact our Technology, Privacy and Data Protection Team for more information.