Flag of Brazil



Article 12

Anonymised data shall not be considered personal data for the purposes of this Law, except when the anonymization process to which it was submitted is reversed, using its own means, or when, with reasonable efforts, it may be reversed.

  • 1. The determination of what is reasonable must take into account objective factors, such as cost and time required to reverse the anonymization process, according to available technologies, and the exclusive use of own resources.
  • 2. - For the purposes of this Law, personal data may also be considered as personal data used to form the behavioral profile of a particular natural person, if identified.
  • 3. The national authority may dispose of standards and techniques used in anonymization processes and carry out checks on their security, after consultation with the National Council for the Protection of Personal Data.