{
  "node_id": "br-lgpd-law-13709-2018-data-protection-principles",
  "title": "Brazil LGPD (Lei Geral de Protecao de Dados) - Data Protection Principles and Subject Rights",
  "domain": "Data Protection & Privacy",
  "version": "1.0.0",
  "last_updated": "2026-01-01",
  "bluf": "Brazil's Lei Geral de Protecao de Dados Pessoais (LGPD, Law 13,709/2018) establishes 10 lawful bases for processing personal data, grants data subjects rights of access, correction, deletion and portability, requires DPO appointment for high-risk controllers, mandates breach notification to ANPD within 2 working days, and imposes penalties up to 2% of Brazil revenue (capped at BRL 50 million per violation) enforced by the Autoridade Nacional de Protecao de Dados.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "related_regulations",
      "industry_mapping",
      "iso_references"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "gdpr-article-6-lawful-basis-marketing"
  ],
  "primary_citations_count": 5
}