Data Protection & Cybersecurity

We assist with and consult on data flows, gap analysis and recommendations for adapting to the LGPD. We also draft and review internal and external policies, contractual instruments, terms of consent, data protection impact reports, and legitimate interest tests. We can assist you in developing data governance practices and in appointing a Data Protection Officer (DPO), while our specialists also advise on internal and external practices to meet the rights of data subjects.

We assist with educational material focused on privacy, data protection, and information security issues for employees, service providers, and other collaborators and conduct internal training according to the interests and needs of each client.

We assist with international data flows and transfers, checking for any possible restrictions and need for adaptation, as well as drafting and reviewing contracts, clauses, codes and binding corporate standards to ensure data flows and transfers.

We support data-driven product and service development by implementing privacy-by-design approaches and proposing solutions for secure and legitimate monetization of information, considering ethical and applicable legal requirements.

We assist with developing preventive information security measures, including legal support in audits, training with simulated cybersecurity incidents, preparing incident response plans and assisting in contracting cyber insurance. We can also support your company in creating internal processes to respond appropriately to incidents before data subjects and authorities.

We provide immediate assistance with security incident investigations, including recommendations for corrective measures, support in crisis management in the media and the market, analyzing if there is a need to notify authorities and data subjects, and drafting reviewing relevant documents.

We defend your company’s interests before Brazilian inspection and regulatory authorities in relation to alleged non-compliance with data privacy and protection regulations, as well as in individual and collective lawsuits on the matter.

We analyze and advise on complying with foreign legislation (including the European Union’s GDPR), working together with foreign offices in a one-stop-shop format. We also examine whether personal data processing policies, procedures, and practices in other countries or economic blocs — such as the United States or members of the Asia-Pacific Economic Cooperation (Apec) group — are compatible with Brazilian legislation.