European Commission releases preliminary version of adequacy decision for Brazil

On September 5, 2025, the European Commission released the preliminary version of an adequacy decision recognizing Brazil as a country that ensures a level of personal data protection equivalent to the European legislation for the purposes of international data transfers from the European Union (EU) to processing agents in Brazil.

In this context, the decision-making process within the EU is in its final stage and, once concluded, will provide greater legal certainty and flexibility for the transfer of personal data from the EU to Brazil. Upon completion of this step, Brazil will join the other 16 countries already recognized as adequate by the European Commission.

On the Brazilian side, the ANPD publicly stated that it is working on an adequacy decision recognizing the equivalence of the EU legislation to the LGPD framework. The process is also in its final stages.

The mutual adequacy recognition between Brazil and the EU simplifies international data transfer operations and strengthens data protection at a global level.

For further information, please contact the heads of the Privacy and Data Protection team, Adriano Chaves and Marcia Issler Mandelbaum.

This bulletin is for information purposes only and should not be relied upon for legal advice on any of the topics covered here. For further information, please contact the leaders of the Privacy and Data Protection Team. CGM Advogados. All rights reserved.