BR LGPD Article 46 - Security and governance measures for children's data
Adopt enhanced security, technical, and administrative measures to protect children's personal data from unauthorized access, loss, alteration, or unlawful processing
Where this comes from
Provision: Article 46 - Security and governance measures for children's data
Instrument: Lei Geral de Proteção de Dados (LGPD)
Citation: Lei nº 13.709/2018 (LGPD), Artigo 46; LGPD Art. 47 (processing agent liability); LGPD Art. 49 (privacy by design); ANPD Security Standards Resolution
Text version: Lei nº 13.709/2018 (LGPD), texto compilado
Who it applies to
Processes personal data — all of these:
- Service processes personal data
Child audience — any one of these:
- Service is specifically designed for children under 18
- Service is likely to be accessed by children under 18
What engineering work it implies
Sample acceptance criteria Landfall generates for this obligation:
- Personal data is encrypted in transit and at rest
- Access to personal data is role-restricted and access is logged
- A documented incident-response / breach-notification procedure exists and is tested
- Third-party processors are bound by equivalent security obligations
- Key rotation completes without loss of access to data encrypted under the prior key
Questions people ask
- Does BR LGPD Article 46 - Security and governance measures for children's data apply to my service?
- It applies when Service processes personal data; and at least one of: Service is specifically designed for children under 18; Service is likely to be accessed by children under 18.
- From when does this apply?
- BR LGPD Article 46 - Security and governance measures for children's data applies from 18 September 2020. Its current status is: in force.
Find out whether this one lands on you
Landfall's pre-scan answers the applicability question above for your product in minutes, then turns every obligation that applies into traceable engineering tickets with a citation chain your auditors can follow.
Not legal advice. Landfall maps regulatory obligations to engineering work for planning purposes. Its verdicts are not legal advice and create no attorney-client relationship — verify with qualified counsel before relying on them.