Art. 5 For purposes of this Law, the following definitions apply

Art. 5

For purposes of this Law, the following definitions apply:

I – personal data: information regarding an identified or identifiable natural person;

II – sensitive personal data: personal data concerning racial or ethnic origin, religious belief, political opinion, trade union or religious, philosophical or political organization membership, data concerning health or sex life, genetic or biometric data, when related to a natural person;

III – anonymized data: data related to a data subject who cannot be identified, considering the use of reasonable and available technical means at the time of the processing;

IV – database: a structured set of personal data, kept in one or several locations, in electronic or physical support;

V – data subject: a natural person to whom the personal data that are the object of processing refer to;

VI – controller: natural person or legal entity of either public or private law in charge of making the decisions regarding the processing of personal data;

VII – processor: natural person or legal entity of either public or private law that processes personal data in the name of the controller;

VIII – officer: natural personal, appointed by the controller, who acts as a communication channel between the controller and the data subjects and the national authority;

VIII – data protection officer: person named by the controller and processor to act as a channel of communication between the controller, the subjects of such data and the National Data Protection Authority (ANPD); (New Wording Given by Law No. 13,853/2019)

IX – processing agents: the controller and the processor;

X – processing: any operation carried out with personal data, such as collection, production, receipt, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation or control of the information, modification, communication, transfer, dissemination or extraction;

XI – anonymization: use of reasonable and available technical means at the time of the processing, through which data loss the possibility of direct or indirect association with an individual;

XII – consent: free, informed and unambiguous manifestation whereby the data subject agrees to her/his processing of personal data for a given purpose;

XIII – blocking: temporary suspension of any processing operation, by means of retention of the personal data or the database;

XIV – deletion: exclusion of data or a set of data stored in a database, irrespective of the procedure used;

XV – international data transfer: transfer of personal data to a foreign country or to an international entity of which the country is a member;

XVI – shared use of data: communication, dissemination, international transfer, interconnection of personal data or shared processing of banks of personal data by public agencies and entities, in compliance with their legal capabilities, or between these and private entities, reciprocally, with specific authorization, for one or more types of processing allowed by these public entities, or among private entities;

XVII – data protection impact assessment^[1]: documentation from the controller that contains the description concerning the proceedings of the personal data processing that could pose risks to civil liberties and fundamental rights, as well as measures, safeguards and mechanisms to mitigate said risk;

XVIII – research body: body or entity of the direct or indirect public administration or a nonprofit legal entity of private law, legally organized under the Brazilian law, with headquarter and jurisdiction in Brazil, that includes in its institutional mission or in its corporate or statutory purposes basic or applied research of historic, scientific, technological or statistical nature;

XVIII – research body: body or entity from the direct or indirect public administration or nonprofit legal entity of private law, legally organized under the Brazilian law, with headquarters and jurisdiction in the Country. This body or entity includes in its institutional mission, in its corporate or statutory purposes basic or applied research of historical, scientific, technological or statistical nature; and (New Wording Given by Law No. 13,853/2019)

XIX – national authority: body of the indirect public administration responsible for supervising, implementing and monitoring the compliance with this Law.

XIX – national authority: body of the public administration responsible for supervising, implementing and monitoring the compliance with this Law in all national territory.” (New Wording Given by Law No. 13,853/2019).