LGPD compliance gaps identified in Brazilian municipalities

Brazilian municipalities face significant challenges in complying with the General Data Protection Law (LGPD). According to 2024 data from IBGE, more than 72% of Brazilian municipalities lack a dedicated area or personnel responsible for implementing data protection policies and procedures.

Compliance requires several administrative actions, including designating a data protection officer, mapping data collection and sharing processes, publishing privacy policies, and maintaining incident response plans. To address these gaps, the Permanent Commission for Digital Transformation and Disruption (CPT2D) of the TCE-MT is leading efforts in Mato Grosso. The commission has distributed questionnaires to local managers to diagnose the current state of data protection in the region's municipalities.