🇧🇷Brazil — AI Governance Cheat Sheet

Key laws

Articles by topic

• LGPD Art. 7: lawful bases for processing personal data (10 hypotheses including consent, legitimate interest, contract, legal obligation)
• LGPD Art. 8: consent requirements — must be free, informed, unambiguous, in writing or by other means demonstrating intent
• LGPD Art. 11: sensitive personal data — narrower lawful bases (racial/ethnic origin, religious belief, political opinion, health, biometric, genetic data)
• LGPD Art. 18: data subject rights — confirmation, access, correction, anonymisation, portability, deletion, information about sharing, revocation of consent
• BR AI Bill Art. 1: purpose and scope — establishes general principles, rights, and a risk-based regime for AI development, supply, and use in Brazil
• BR AI Bill Art. 3: founding principles — human centrality, non-discrimination, transparency, accountability, human oversight
• BR AI Bill Art. 13: preliminary risk assessment classifying AI systems by risk level (excessive, high, or general)
• BR AI Bill Art. 14: prohibited (excessive-risk) AI practices — including subliminal manipulation, social scoring by public authorities, exploitation of vulnerabilities