Adequacy decision – Brazil

The European Commission and Brazil have taken a major step towards a deeper digital cooperation by adopting mutual adequacy decisions that recognize each other's data protection frameworks as equivalent. This means personal data can now flow between the EU and Brazil without additional safeguards, while still benefiting from strong privacy protections on both sides.

The decision reflects the close alignment between the EU's General Data Protection Regulation (GDPR) and Brazil's Lei Geral de Proteção de Dados (LGPD). By formally acknowledging that both legislations provide a comparable level of protection, the two partners have removed a significant legal and administrative barrier to cross-border data transfers.

For businesses, the impact is immediate: simpler compliance, reduced costs, and greater legal certainty when operating across the EU–Brazil corridor. For individuals, it ensures that their personal data continues to be protected to high standards, regardless of where it is processed.

More broadly, the agreement creates one of the world's largest areas of free and safe data flows and sends a strong signal internationally: robust data protection and economic growth are not competing goals, but mutually reinforcing ones. For more information: EU-Brazil data adequacy agreement.