The LGPD aims to protect the fundamental rights related to the citizen's informational sphere. Thus, the Law introduces a series of new rights that ensure greater transparency in data processing and give the data subject a leading role in controlling their information. Data subjects may, at any time and upon express request, have easy access to information about the processing of their data, being able to request from the controller, among other rights:
Confirmation of the existence of the processing of their data;
- Access to their data;
- Correction of incomplete, inaccurate, or outdated data;
- Anonymization, blocking, or elimination of unnecessary, excessive, or unlawfully processed data;
- Portability of data to another service or product provider;
- Elimination of personal data processed with the consent of the data subject;
- Information about the processing of their data and the entities with which the controller has shared data, as well as the possibility of not providing consent.
- Information about the possibility of not providing consent;
- Revocation of consent; and
- Review of decisions made solely based on automated processing of personal data.
In addition to the rights of data subjects, the LGPD assigns to data processing agents the obligation to provide a clear and complete response to requests within the legal timeframe. In the event of the inability to meet the request of the data subject, the controller must indicate the factual or legal reasons that prevent the adoption of the measure.