Governance and Legal Bases
Analyzing purposes, legal bases, data sharing, and retention criteria, while defining legal responsibilities.
Counsel on personal data processing, LGPD compliance, and incident preparedness and response.
Personal data is used in relationships with customers, employees, suppliers, and partners. We provide legal analysis of these operations, clarify responsibilities, and assist with data subject requests, incidents, and regulatory issues.
Analyzing purposes, legal bases, data sharing, and retention criteria, while defining legal responsibilities.
Reviewing notices, policies, and contractual provisions on data processing, sharing, and security.
Helping organize the receipt, assessment, and response to personal data requests.
Planning the legal response and assisting with the assessment of obligations and communications with authorities.
Mapping an operation means understanding where data comes from, why it is used, who receives it, and what criteria govern retention. Legal analysis considers legal bases, data subject rights, and the responsibilities of controllers, processors, and others involved.
A new system or supplier can change that picture. The review should cover contracts, notices, request-handling procedures, and response plans, in coordination with technology and information security teams.
The legal response is coordinated with technology and information security teams. Contracts, governance, and risk management should also reflect data-related decisions. Measures need review when new purposes, suppliers, or systems change the operation.
Gustavo Santos de Almeida and Fernanda Trindade dos Santos de Almeida lead the firm. They take part in case assessment, strategy development, and oversight of each engagement.
Meet the Partners