The General Data Protection Law (LGPD) establishes important and mandatory guidelines for the collection, processing, and storage of personal data. It was inspired by the GDPR (General Data Protection Regulation), which came into effect in 2018 in the European Union, bringing significant impacts for businesses and consumers.

In Brazil, the LGPD (Law No. 13,709, of August 14, 2018) came into effect on September 18, 2020, marking an important step for the country. With this, Brazil joined the group of nations that have specific legislation to protect their citizens' personal data. In light of current cases of misuse, commercialization, and data breaches, the new rules ensure Brazilians' right to privacy while also preventing trade barriers with other countries.

The legislation is based on various principles and has the following main objectives:

• Ensure the right to privacy and the protection of personal data for data subjects through transparent and secure practices, safeguarding fundamental rights.
• Establish clear rules for the processing of personal data.
• Strengthen the security of legal relationships and the trust of data subjects in the processing of their personal data, ensuring free enterprise, fair competition, and the protection of commercial and consumer relations.
• Promote competition and free economic activity, including data portability.

Apex-Brasil is on its journey toward LGPD compliance. It has appointed a Data Privacy Officer, made advancements in its systems, developed an action plan, and is guiding employees and partners throughout the process.