Brazil
processing of sensitive personal data can only be carried out: with the express consent of the data subject or person responsible, for specific purposes or; 1. without the consent of the data subject, in cases where it is indispensable for:
by entities may only be performed when relying on the following legal basis: when the data subject has consented to the processing; 1. for the compliance with legal or regulatory obligations by the controller; 2. by the public administration, for the processing and shared use of data necessary for the execution of public policies provided in laws or regulations, or based on contracts, agreements or similar instruments, subject to the provisions of Chapter IV of this Law; 3. for carrying out studies by research entities, ensuring, whenever possible, the anonymization of personal data; 4. when necessary for the execution of a contract or preliminary procedures relating to a contract to which the data subject is a party; 5. for the regular exercise of rights in judicial, administrative, or arbitral proceedings; 6. for the protection of life and physical integrity of the data subject or third parties; 7. for the protection of health, in procedures performed by professionals of the health area or by sanitary entities; 8. when necessary to comply with the legitimate interests of the controller or of a third party, except when the fundamental rights and freedoms of the data subject prevails; and 9. 10.for the protection of credit. The art. 11 of the LGPD states that the
2. compliance with a legal or regulatory obligation by the controller; 3. shared processing of personal data necessary for the execution, by the public administration, of public policies provided for in laws or regulations;
https://klalaw.com.br/en/home/
Made with FlippingBook - PDF hosting