LGPD provides in Article 7 the legal hypotheses for the processing of personal data. LGPD provides in Article 11 the legal hypotheses for the processing of sensitive personal data.

It is important to note that several hypotheses of treatment – also known as legal grounds – are common to both personal data and sensitive personal data. Some legal grounds, however, do not apply to the processing of sensitive data.

The law only allows the processing of personal data minus a legal basis. If it is not possible to fit the activity in one of them, the organization shall reconsider the processing activity at issue.

To demystify some beliefs around legal grounds, check out article “5 myths created on the General Law of Data Protection”, co-authored by our partner Caio Lima and the coordinators of our Data Protection area, Henrique Fabretti and Tiago Furtado.