Mattos Filho has a robust data protection and cybersecurity practice, known for its specialist expertise in handling both complex contentious and non-contentious matters. With deep sector-specific knowledge spanning banking, insurance, health, and technology, the team advises on major security incidents, regulatory frameworks, data processing, and compliance. Fabio Kujawski is a key contact for data privacy-related transactions, regulatory issues, and contractual matters, while Luiz Felipe Di Sessa advises a wide range of clients, including major corporations and start-ups, on personal data processing and represents them before regulatory bodies. The practice also benefits from the expertise of technology specialist Paulo Brancher and data privacy and cybersecurity expert Thiago Luis Sombra, both of whom play central roles in the team. Supporting the practice are Jaqueline Simas de Oliveira, who handles a mix of advisory and litigation work in data protection; Maíra Schweling Scala Pfaltzgraff, who brings expertise in contractual negotiations and drafting complex agreements; and Isabela Fernandes, who focuses on digital platforms and emerging technologies.

Pinheiro Neto Advogados is a 'reference in the sector' of data privacy, protection, and cybersecurity, frequently assisting clients with complex matters related to Brazil’s Data Protection Regulation (LGPD). The firm brings extensive experience in managing cybersecurity risks and advising on appropriate remedial actions following data breaches. It is also highly active in litigation, particularly in representing social media and technology companies in cases concerning privacy, free speech rights, liability, and user data. Practice head André Zonaro Giacchetta regularly appears before the Federal Supreme Court, often dealing with matters involving internet platforms. José Mauro Decoussau Machado provides advice across a mix of privacy, IP, and technology issues, while Larissa Galimberti is noted for her expertise in both data protection and the structuring of new technology ventures in Brazil. Ciro Torres Freitas is a technology specialist who assists clients in responding to data security incidents and supports them through enforcement actions and administrative proceedings concerning personal data and artificial intelligence.

The team at B/Luz advises international and multinational clients on a range of matters, including data protection, data management, DPO-as-a-service, AI, and cross-border data transfers. The team places particular emphasis on data compliance projects and the development of privacy governance programmes that engage with data subjects and incorporate privacy-related metrics. It also brings significant expertise in structuring AI governance frameworks, conducting specialised audits, and responding to data leaks and cyber attacks. Fernando Bousso co-leads the practice with Vanessa Pirró, with Bousso focusing on start-ups, technology, and adtech companies, while Pirró advises on privacy programmes and data protection legislation. Adriane Loureiro Novaes is recognised for her work on cross-border data transfers and security incident response, and Felipe Gabriades is known for his strong background in personal data protection and digital law.

BMA Advogados stands out for its strong track record in managing data breaches and cyber crises. The team provides support across forensic investigations, incident responses, communications with regulatory bodies, and representation in potential legal proceedings. It has deep expertise in addressing both domestic and international security incidents, regularly advising a global client base. Beyond cybersecurity, the team also counsels clients on international data transfers and M&A transactions involving data privacy considerations. Practice head Felipe Palhares is highly experienced in personal data issues, security incidents, data breaches, and ransomware attacks, and frequently advises on reviewing privacy policies and ensuring compliance in the rollout of new products and services. Fernanda Villela Viana is recognised for her work in data privacy and compliance investigations.

The privacy, technology, and cybersecurity team at Demarest Advogados offers advice across the full spectrum of privacy matters, including security incidents, AI, and data compliance. Recently, the team has managed a range of complex cases for both domestic and international clients, addressing issues such as information processing and risk mitigation for data subjects. A key strength of the practice lies in keeping clients up to date with the latest developments in the LGPD and other data protection laws, while regularly reviewing and enhancing their compliance frameworks. Tatiana Campello, who leads the team, is a recognised authority in data privacy and protection, with experience representing clients before the ANPD, conducting data mapping, and evaluating privacy risks. Cecília Cunha supports clients on compliance initiatives and advises on the data protection aspects of M&A transactions

Leonardi Advogados is widely recognised in Brazil for its strong expertise in data protection and digital law. The practice is led by founder Marcel Leonardi, a prominent authority in the field of data protection and privacy, known for advising technology sector clients on complex regulatory matters and proceedings before the ANPD. He is supported by Fernanda Maia, who focuses on data privacy issues, particularly those involving personal data and the use of minors' data. The firm regularly assists clients with the implementation of the LGPD and international regulations such as the GDPR, and is experienced in assessing data processing activities, analysing data flows, drafting contracts and internal policies, and conducting risk assessments. Core areas of focus also include international data transfers, privacy by design, and the negotiation of data processing agreements. The team has extensive experience in crisis management, handling security incidents, conducting risk assessments, and representing clients before the ANPD and other supervisory bodies.

TozziniFreire fields a data protection practice co-led by specialists Marcela Waksman Ejnisman and Patrícia Helena Marta, who oversee a broad range of contentious and non-contentious matters. The team is well equipped to assist both domestic and international clients with complex issues such as data breaches, data compliance programmes, and litigation arising from data protection disputes. Carla do Couto Hellu Battilana brings particular strength in cybersecurity and data protection, assisting with the preparation and review of terms of use, privacy policies, data licences, and sharing agreements. Technology-related contentious cases are handled by Bruna Borghi Tomé, while data compliance expert Luzia Sato adds further depth to the team with her knowledge of the LGPD and IP matters.

Trench Rossi Watanabe assists international and domestic clients with a wide range of privacy, data protection, and cybersecurity issues. The team, which is well-regarded for its sector expertise, particularly in TMT, provides advice on data-driven transactions, LGPD compliance, data protection litigation, and security incidents. Co-head Flávia Amaral often advises clients on cyber readiness and incident response planning. Flavia Rebello co-leads the practice and is a trusted adviser on data protection, particularly for major multinational corporations. The team is also active in advising on AI-related issues and representing clients before the ANPD. Marcela Trigo De Souza is the go-to contact for litigation matters, while Felipe Zaltman is well-versed in both technology and data protection issues.

Veirano Advogados advises a diverse range of domestic and international clients on contracts, new product launches, compliance with the LGPD, and litigation. The team acts for several clients from the telecom, IT, and internet sectors on data issues related to agreements, licensing, distribution, and IT outsourcing. Additionally, it is recognised for its expertise in e-commerce, new technologies, and electronic payments, assisting with the drafting of policies and terms of use for websites. Leading the group, Fábio Pereira leverages his background in IP transactions to advise on the data protection and privacy aspects of transactions. Cíntia Andrade focuses on corporate and contractual issues, managing international data transfers, and conducting data protection impact assessments. She also provides advice on risk analysis and preventative measures for cybersecurity and data breaches. Denise Louzano is noted for her in-depth knowledge of digital law, information technology, and personal data protection, frequently assisting with data assessments and policy reviews. Isabel Hering supports clients in reviewing policies, terms of use, and agreements to ensure compliance with the LGPD, in addition to assisting with data breaches and cyberattacks.

A go-to firm for data protection and privacy litigation, BFBM – Barroso Fontelles, Barcellos, Mendonça & Associados attracts regular instructions from international, multinational, and domestic technology companies, banks, social media enterprises, and start-ups. The team assists with privacy by design and AI regulatory compliance, alongside advising on privacy-related lawsuits, ANPD public consultations, data breaches and administrative investigations. Eduardo Mendonça is a litigation specialist who frequently acts before the Brazilian Superior Courts, including the Federal Supreme Court and Superior Court of Justice. Felipe Monnerat is a name to note for advice on regulatory restrictions and consumer and workers’ rights. Fernanda Mascarenhas focuses on LGPD compliance programmes, data breach responses, and international data transfers. André Zanatta left the firm in May 2025.

Opice Blum e Bruno Advogados Associados ‘is a reference when it comes to digital law’ and leverages this expertise to advise clients on cybersecurity and data privacy matters. The department frequently assists private companies and public organisations with the implementation and updating of LGPD compliance projects, and also provides outsourced DPO services. Co-lead Renato Opice Blum is known for his speciality in digital law and data protection. Co-head Henrique Fabretti Moraes is the go-to name for data protection and AI mandates. Contentious claims involving personal data protection, cyberattacks, data breaches, and digital fraud are handled by Camilla Jimene.

Peck Advogados is a digital law specialist firm founded by practice head Patricia Peck over 20 years ago. The firm regularly handles issues involving the ANPD and assists clients with creating and updating LGPD frameworks. It is also active in AI governance projects and has provided opinions on novel issues such as privacy and cybersecurity risk mitigation in 5G and IoT. Peck is an expert in data protection and cybersecurity, contributing significantly to privacy and data protection academia in Brazil. She has assisted clients with innovative technology projects involving complex data privacy aspects. Leandro Bissoli works alongside Peck and is well-versed in personal data issues. Henrique Rocha assists with data breaches and digital fraud incidents.

Data protection and technology boutique Prado Vidigal Advogados focuses on the technology, pharmaceutical, and consumer goods sectors. The team often acts as DPO, ensuring clients are compliant with the LGPD, providing incident response services, and assisting with privacy governance frameworks and cross-border data transfers. The team is jointly led by Luis Fernando Prado, Paulo Vidigal, and Pedro Sanches, who are all experts in technology and data privacy matters. Verônica Marques is another name to note for cyber law issues.

VLK Advogados excels in privacy and data protection, organising its services around six core areas: ethical governance and data protection, cybersecurity and incident response, artificial intelligence, creative economy and IP, strategic litigation, and legal design and visual law. The firm stays ahead of regulatory trends in the data privacy space, regularly drafting and reviewing contracts, policies, and accountability documents. It supports clients with digital risk assessments, incident response planning, and representation before the ANPD and other regulatory bodies. The team is co-led by Rony Vainzof, a cybersecurity and data protection expert serving clients across sectors such as e-commerce, telecoms, finance, and retail; Caio Lima, who specialises in AI governance; and Gisele Karassawa, a specialist in digital law.

Almeida Advogados has a dedicated digital law practice led by Márcio Mello Chaves, described by a client 'as an expert in the LGPD'. The group is well versed in guiding clients through LGPD implementation and compliance, and also offers expertise in information security and digital fraud prevention. In addition to deep knowledge of the LGPD, the team is experienced in the European GDPR, the Brazilian Internet Act, and local e-commerce regulations.

Azevedo Sette Advogados provides comprehensive support on LGPD compliance, regularly conducting data protection impact assessments and advising clients on minimising risks related to data breaches and cyberattacks. The team is also experienced in building and evaluating personal data security frameworks. The practice is led by Ricardo Barretto Ferreira, who focuses on TMT-related consulting and litigation.

Campos Mello Advogados advises clients on a broad range of data protection matters, including LGPD compliance projects, localisation and implementation of privacy documents, and the drafting and review of privacy clauses in both domestic and international contracts. The firm also provides robust support during data breaches, assisting with incident monitoring and response strategies. Practice head Paula Mena Barreto is highly experienced in implementing privacy frameworks and advising on breach responses.

Daniel Law works closely with international law firms to advise overseas clients in health, technology, food & beverage, fintech, banking, gaming and software on data privacy and protection. The team is jointly led by Nuria López, Carina Souza Rodrigues and Robert Daniel-Shores. López focuses on the technology sector and advises on data privacy, AI and regulatory issues. Rodrigues is well-versed in IP, technology and data privacy, while Daniel is an IP litigation specialist. Renata Idie is key to digital litigation, assisting clients with structuring privacy governance frameworks and data mapping. Maraísa Cezarino is experienced in LGPD compliance and international privacy law issues.

KLA Advogados offers comprehensive data protection services for both international and domestic clients. The team provides expert advice on data privacy and protection matters, including the drafting of contracts, terms of use, and privacy policies. It is also well-versed in regulatory risk assessments and the implementation of data protection compliance programmes. Practice head Ana Carolina Cesar is highly skilled in data protection issues, guiding clients through data breaches and serving as a local Data Protection Officer (DPO).

LBCA | Lee, Brock, Camargo Advogados deploys its experienced team across a range of cybersecurity and data privacy matters, including acting as Data Protection Officer for a number of companies and advising them on the implementation of privacy governance programmes. The practice is led by Solano de Camargo, Paulo Vinicius de Carvalho Soares and Ricardo Freitas Silveira, all of whom have a wealth of experience in data protection mandates.

Lefosse Advogados' data protection team provides expert assistance in structuring governance programmes and addressing data privacy and protection issues in M&A transactions. The team is well versed in advising on new digital business models that involve personal data. The group is led by IP disputes expert Ricardo Nunes, who is supported by Mariana Sangoi, a specialist in privacy and data protection. Beatriz Becker is known for her work on data compliance projects, advising clients on both domestic and international governance structures. Former practice head Paulo Lilla left the firm in January 2025.

Machado Meyer Sendacz e Opice Advogados advises technology companies, start-ups, IT service companies, and fintechs on data protection and cybersecurity matters. The team ensures clients comply with the LGPD and international data privacy regulations, helps with implementing privacy by design, and assists with impact assessments and audits. The practice is led by Juliana Abrusio, who is recognised for her expertise in regulatory compliance and structuring new digital business models.