The person designated by the controller to be the liaison with data subjects and the ANPD (National Data Protection Authority).
The Data Protection Officer (DPO) is the person appointed by the controller and the processor to act as a communication channel between the organization, the data subjects, and the National Data Protection Authority.
It can be an employee, an external provider, or a company (DPO as a service). The identity and contact information of the data protection officer must be publicly disclosed in a clear and objective manner, usually in the privacy policy.
Article 5, VIII, of LGPD The text defines the data protection officer, and Article 41 describes their activities: accepting complaints and communications from data subjects, receiving communications from the ANPD (National Data Protection Authority), guiding employees on data protection practices, and performing other duties determined by the controller. Resolution CD/ANPD No. 18/2024 is available at [link to resolution]. ANPD websiteThe document details the role, requires the person in charge to have autonomy, and waives the appointment requirement for small-scale agents, who need to maintain a communication channel with the primary agents.
A Management of Holders' Requests, Incident Management and Capacity They concentrate the supervisor's work in a single environment; the assistant PrIA It automates repetitive tasks, such as drafting responses and filling out diagnoses.
Controller · ANPD · DSAR · Privacy policy · Back to glossary
Updated .
Request a demo and see how... Privacy Tools It organizes mapping, legal bases, rights holder applications, and evidence all in one place.
