The National Authority of Data Protection (“ANPD”) published, last week, the spreadsheet template for recording personal data processing activities, to recommend compliance with article 37 of the General Data Protection Law ( “LGPD”) for Small Processing Agents (“ATPPs”).
The definition of ATPPs, as found in CD/ANPD Resolution No. 2/2022 (“Resolution”), allows for flexible adequacy measures for: (i) legal entities governed by private law, including non-profit entities, in the category of micro-enterprises, small businesses or startups; and (ii) natural persons and depersonalized private entities that process personal data.
Check here for the complete content prepared by our Data Protection and Technology team, available in Portuguese.
