End of the Transition Period for ANPD Resolution No. 19 Regarding International Data Transfer

The National Data Protection Authority (ANPD) published CD/ANPD Resolution No. 19 on August 23, 2024. This Resolution approves the Regulation on International Data Transfer.

It is essential to highlight that the 12-month compliance deadline for this Resolution ended last Saturday, August 23, 2025. Compliance with the new regulation is, therefore, imperative for international data transfer operations.

The Resolution establishes the procedures and rules applicable to operations involving international data transfer, including those based on contractual clauses. The standard contractual clauses, drafted and approved by the ANPD, are one of the transfer mechanisms provided for in Law No. 13,709, of August 14, 2018 (LGPD).

For the international data transfer to be valid when supported by the adoption of the standard clauses, the Resolution determines that the full and unedited adoption of the text made available in Annex II is essential, via a contractual instrument signed between the data exporter and the data importer. It is important to note that other contractual provisions cannot exclude, modify, or contradict, directly or indirectly, the content of the standard contractual clauses.

Additionally, the controller must comply with transparency measures, such as making the full text of the clauses used for international data transfer available to the data subject upon request (observing commercial and industrial secrets).

The controller must also publicize clear, precise, and accessible information about the international transfer on its website (in the privacy notice), such as the purpose of the processing, the destination country, the data subjects’ rights, and the means for their exercise.

Being in compliance with the new Regulation on International Data Transfer is not just a legal obligation, but a competitive advantage that highlights the maturity of your company’s data governance program, as well as the care and transparency with which data is handled.

By Dr. Patricia Peck (CEO and Founding Partner) and Dr. Giovanna Bortoto (Business, Institutional, and Governmental Relations Manager)

AUTHOR

Share

Latest news

24/07/2025

Preventive measures and responses involving digital fraud, theft, and technological means

In its 17th annual report published, the Brazilian Public Security Forum demonstrated that the number of fraud records in Brazil has grown by 326.3% since […]

24/10/2025

Peck Advogados Dream Team Grows in The Legal 500

We have received the news that our firm has expanded its highlight in The Legal 500, one of the most respected research institutions in the […]

12/09/2025

BACEN Resolution No. 501/2025 establishing adaptation measures that must be adopted by October 13, 2025, has been published

BCB Resolution No. 501/2025, which amends BCB Resolution No. 142/2021, establishes strict procedures and controls for fraud prevention. The new guidelines must be adopted by […]

View more posts

SUBSCRIBE TO OUR NEWSLETTER

Receive content on Law, Innovation, and Business.

SIGN UP

Our Office

Rua Henrique Schaumann, nº 270, 4º andar
Edifício Pinheiros Corporate,
São Paulo – SP | CEP: 05413-909
(11) 2189-0444