Brazil puts the burden of proofon the one asking for consent.
ConsentCenter keeps a record of every consent and revocation, in Portuguese where your visitors read Portuguese, ready when the ANPD or a data subject asks.
- 01 Ask
- 02 Prove
- 03 Revoke
Click a provision to read what it says.
The LGPD is not a GDPR translation.
It has ten legal bases, its own regulator and its own deadlines.
Consent is one of the LGPD’s legal bases, and when you rely on it the law says proving it is your job. It also says revoking it must be free and facilitated. A banner that only stores a yes cannot show either.
Where this goes wrong first.
Generic consent for everything
The LGPD treats authorisations that are generic as void. One checkbox for all purposes does not hold up.
Revocation is a support request
Consent can be revoked at any time through a free and facilitated procedure. A form buried in the privacy policy is neither.
Portuguese visitors, English notice
Information has to be clear to the data subject. A notice written for another market rarely is.
What changes for you.
Collect specific, purpose-level consent with a record of each choice.
Make revocation free and as simple as giving consent.
Handle data subject requests with an owner and a deadline.
How it works
Ask
Request consent per purpose, in the visitor’s language.
Prove
Keep the record the controller is required to produce.
Revoke
Apply revocations and rights requests across systems.
How the banner should look.
A ConsentCenter banner set up for the LGPD. Click it: accept, reject or open the preferences.
Allowed to run: Strictly Necessary
What it is doing
- Only processing that relies on consent waits for the visitor.
- Purposes are described specifically, not as one generic agreement.
- Revoking is free and one click away afterwards.
- The banner can be shown in Portuguese for Brazilian visitors.
What the text actually says.
- LGPD Article 8
- Consent must be given in writing or by another means that demonstrates the data subject’s will, and generic authorisations are void.
- LGPD Article 8, §2
- The burden of proving that consent was obtained in accordance with the law lies with the controller.
- LGPD Article 8, §5
- Consent may be revoked at any time by the data subject’s express request, through a free and facilitated procedure.
- LGPD Article 18
- Data subjects have rights including confirmation of processing, access, correction, anonymisation or deletion, portability and information about sharing.
Paraphrased for brevity and provided for orientation, not as legal advice. Which obligations apply to your organisation is a question for your own counsel, and ConsentCenter does not determine it for you.
The products that apply
Frequently asked questions
The LGPD does not name cookies, but where cookies process personal data on the basis of consent, its consent rules apply. The ANPD has published guidance on cookies describing what it expects.
The Autoridade Nacional de Proteção de Dados (ANPD). Sanctions under Article 52 include fines of up to 2% of revenue in Brazil, capped at R$50 million per infraction.
No product can do that. ConsentCenter provides the consent record, revocation and request workflow; your legal bases and obligations are for your counsel.
Bring us your LGPD question.
Show us the consent question you cannot currently answer — the choice that did not propagate, the record you could not reproduce — and we will walk through exactly how ConsentCenter handles it.