This Law applies to any processing operation carried out by a natural person or a legal entity of either public or private law, irrespective of the means, the country in which its headquarter is located or the country where the data are located, provided that:
I – the processing operation is carried out in the national territory;
II – the processing activity is aimed at the offering or provision of goods or services, or at the processing of data of individuals located on the national territory;
II – the processing activity is aimed at the offering or provision of goods or services, or at the processing of data of individuals located on the national territory; or (New Wording Given by Law No. 13,853/2019)
III – the personal data being processed were collected in the national territory.
§1 Data collected in the national territory are considered to be those whose data subject is in the national territory at the time of collection.
§2 Data processing as provided in item IV of the lead sentence of Art. 4 of this Law is exempted from the provisions of item I of this article.