Flag of Brazil



Article 9

The holder has the right to easy access to information about the processing of his data, which should be made available in a clear, appropriate and overt manner about, among other characteristics provided for in regulation to comply with the principle of free access:

  • I - specific purpose of treatment;

  • II - form and duration of treatment, observing the commercial and industrial secrets;

  • III - controller identification;

  • IV - controller contact information;

  • V - information about the shared use of data by the controller and the purpose;

  • VI - responsibilities of the agents who will perform the treatment; and

  • VII - rights of the holder, with explicit mention of the rights contained in art. 18 of this Law.

    • 1. In the event that consent is required, it shall be considered null and void if the information provided to the holder is misleading or abusive in content or has not been previously presented transparently, clearly and unambiguously.
    • 2. In the event that consent is required, if there are changes of purpose for the processing of personal data not compatible with the original consent, the controller shall inform the holder in advance of the changes of purpose, and the holder may revoke the consent if disagree with the changes.
    • 3. When the processing of personal data is a condition for the provision of a product or service or for the exercise of the right, the holder shall be clearly informed of this fact and the means by which he may exercise the rights of the holder listed in art. 18 of this Law.