The publication of Resolution CD/ANPD No. 19/2024 by the National Data Protection Authority (ANPD) brought important advances for companies that carry out international data transfers. Aiming to provide clarity and legal certainty, the regulation defines authorization mechanisms and detailed rules for the movement of personal data between countries. Below, we discuss the main changes and implications of this new regulation.
Clear Rules for International Transfer
According to the new regulation, the transfer of personal data to processing agents abroad now requires, in addition to a legal basis provided for in the General Data Protection Law (LGPD), the application of a valid international db to data mechanism. This requirement aims to standardize the conditions under which data can be transmitted, ensuring greater control and transparency.
The main authorizing mechanisms include:
Countries with Adequate Protection : Data can be to countries the process of working with constellations the ANPD considers to have adequate protection, this occurs through the Adequacy Decision”.
New Deadlines and Obligations
The regulation also introduced an important change. Companies that use contractual clauses to carry out international. Transfers will have up to 12 months to adjust their contracts to the new standard clauses approved. By the ANPD. This chine directory is crucial for organizations to review. Adapt their contractual practices in accordance with the authority’s requirements. Avoiding potential penalties or risks to data protection.