Souto Correa has a team of professionals specialized in data protection and privacy matters, with the aim to strengthen the performance of companies in different sectors regarding data processing and security.  The firm provides multidisciplinary advice through the joint action of professionals specialized in various areas, such as Intellectual Property, Consumer and Product Liability, Contracts and Labor, who are capable of developing effective solutions related to the Brazilian General Data Protection Act (LGPD) and the General Data Protection Regulation (GDPR), both in the advisory and litigation sphere.

The area’s professionals advise clients in many segments on activities involving collection, use, transfer and retention of personal data, including experience in reviewing privacy policies, product privacy warnings and contracts with third party service providers for support on site, preparation and delivery of internal training for paper and pulp, electricity distribution and electronics companies, and drafting software license agreements for the trade of devices with embedded software for artificial intelligence companies.


Recent representations

■ Advice on companies’ conformity to LGPD and GDPR, including analysis of internal procedures/processes and mapping of points to be reviewed;

■ Formulation and revision of internal policies with the aim to mitigate risks, including an action plan for conformity of Human Resources department – procedures of recruitment, management and termination of contracts of employees and third parties – as well as to other departments, e.g. Marketing;

■ Trainings, courses and workshops to raise awareness and to deploy data protection policies, which also comprised multidisciplinary teams;

■ Drafting and review of terms and conditions applicable to electronic commerce and internal procedures regarding the use of personal data for the purposes of media advertising by means of access to products and services and data transfer to third parties;

■ Review of draft template for Data Processing Addendum to accompany contracts involving collection, storage and/or processing of personal data;

■ Review of contracts which involve collection, storage and/or processing of personal data;

■ Acting in judicial and extra judicial cases involving privacy and data protection in the civil, labor, criminal and administrative areas.