Brazil LGPD Article 20: review of automated decisions
Under Brazil’s data protection law, people can ask for review of decisions made solely by automated processing, and for clear information about the criteria used.
Article 20 of the General Data Protection Law (Law 13.709/2018) gives people the right to request review of decisions made solely on the basis of automated processing of their personal data that affect their interests, including profiling. They can also ask for clear information about the criteria and procedures used.
A provisional measure of December 2018, converted into Law 13.853/2019, removed the requirement that the review be carried out by a human, and a 2019 attempt to restore it was vetoed. If a business withholds information citing trade secrets, the National Data Protection Agency (ANPD) can audit the system for discrimination.
Key dates
LGPD enacted
Provisional Measure 869 removes the human-review requirement
Law 13.853 confirms the change; human-review paragraph vetoed