Definition
Brazil's LGPD (Lei Geral de Proteção de Dados) is the country's data protection law, modeled on GDPR, and it applies to email marketing that processes personal data. You need a legal basis to process subscribers' data, most commonly consent or legitimate interest.
LGPD requires transparency about how data is used, and it grants data subjects rights including access, correction and erasure. In an email context, this means clarity in your privacy practices and a reliable way for subscribers to exercise their rights.
Because LGPD and GDPR share principles, many global-ready practices apply directly: lawful basis, transparency, data minimization and honoring opt-out and erasure. Ensure your data processing register reflects Brazilian activities because notably it can apply to foreign companies processing data about people in Brazil.
Was this useful?
Related Glossary Terms
Abuse Complaint
An abuse complaint is a report from a recipient who marks an email as spam, which negatively affects sender reputation and deliverability.
Anonymized Data
Anonymized data is email subscriber or interaction data that has been stripped of personally identifiable information so individuals cannot be re-identified.
Australia Spam Act 2003
The Australian Spam Act 2003 bans unsolicited commercial email, requiring consent, accurate sender information and a clear, working unsubscribe facility on every message.
CAN-SPAM Act
The CAN-SPAM Act is a US law that sets rules for commercial email. It requires accurate subject lines, a physical address, a clear opt-out mechanism, and prompt processing of unsubscribes. Violations can result in penalties up to $51,744 per email.
Canada CASL Guide
CASL (Canada's Anti-Spam Legislation) requires express or implied consent, clear identification, and a functioning unsubscribe mechanism before sending commercial electronic messages to Canada.
China Email Marketing Regulations
China regulates unsolicited email through rules and blocking by major providers, so cross-border email to China requires strict consent, clean lists and monitored deliverability.
Frequently Asked Questions
LGPD is Brazil's data protection law, similar to GDPR, governing how personal data is collected, processed and used, including for email marketing.
You need a lawful basis, most commonly consent or legitimate interest. If you rely on consent, it must be specific, informed and freely given.
It can apply if you process the data of people in Brazil, so international email marketers targeted at Brazil should apply LGPD-aligned practices.