‘Cutting-edge law firm‘ Mattos Filho is adept at advising domestic and multinational clients on the full scope of data protection and cybersecurity matters, ranging from compliance issues related to the Brazilian Data Protection Law (LGPD), to security incidents and cybersecurity attacks. Paulo Brancher, a key contact for clients operating in the financial services, technology and e-commerce sectors, is skilled in security incidents and international data transfers. Fabio Kujawski is known for his expertise in data protection, focusing on transactions and regulatory issues. Data protection and cybersecurity specialist Thiago Sombra is especially noted for his work on complex security incident cases. Luiz Felipe Di Sessa combines technology and data protection expertise to advise on data processing compliance. Associate Isabela Fernandes plays a key role in data privacy matters.

The data privacy and cybersecurity practice at Pinheiro Neto Advogados continues to be a leading force in the industry, approaching LGPD compliance and cybersecurity issues as multidisciplinary matters. With notable strength in data breaches and related litigation, the team assists clients from numerous industries but particularly excels in advising major technology, healthcare, insurance and financial services companies. Raphael de Cunto splits his time between technology and media matters, while André Zonaro Giacchetta leads on sensitive litigation involving data privacy and tech transfers. José Mauro Decoussau Machado is another name to note for contentious matters in this space. Advising on the management of data protection programmes, the drafting of data protection policies and preparation of data breach notices are all key areas of activity for Larissa Galimberti. Ciro Torres Freitas largely assists multinational technology companies in LGPD compliance and security incidents.

Noted for 'providing an environment of security and compliance in data processing', the data governance team at B/Luz assists clients - including major names from the telecoms, financial services, and technology sectors - with an array of data protection and privacy matters, including policy review and management, governance issues, and data breaches. As part of its service offering, the firm often acts as data protection officer (DPO-as-a-service) and conducts due diligence to identify potential regulatory and information security risks involved with international data transfers and investigations. Practice head Fernando Bousso is lauded for his 'accurate technique involving data protection and privacy'. Pedro H. Ramos oversees the team alongside Bousso and is known for his work in the digital media and technology spaces, while co-head Vanessa Pirró focuses on transactions in the tech sector and data protection compliance. Recently promoted partner Adriane Loureiro Novaes assists with security incidents and cross-border data transfers.

TozziniFreire Advogados‘ cybersecurity and data privacy practice is led by industry specialists Marcela Waksman Ejnisman and Patricia Helena Marta Martins, who regularly assist with data protection compliance programmes, impact assessments and data breaches. Other key individuals include Carla do Couto Hellu Battilana, who often reviews and analyses terms of use and privacy policies, and advises on data licensing and data sharing agreements, and Luzia Sato, a name to note for LGPD compliance projects. Martins leads the litigation team, assisted by Bruna Borghi Tomé, who is well versed in contentious matters in the tech sector and involving information security breaches, and Sofia Gavião Kilmar, who has handled cases concerning data protection, innovation and digital electoral law.

Veirano Advogados has a ‘deep specialisation‘ in data protection and privacy matters, assisting clients from an array of industries with a large number of data privacy projects ensuring compliance with LGPD legislation. The team is particularly noted for its skills in handling sensitive matters involving the processing of personal data for multinational companies operating in heavily regulated sectors, such as healthcare and financial services. The practice is led by Fábio Pereira, who has a wealth of experience in assisting international clients with a variety of data privacy and protection matters. Digital law specialist Cíntia Andrade advises on data assessments and is also proficient at reviewing the data protection aspects of terms of use policies and agreements. Denise Louzano handles both compliance work, as well as mandates concerning data breaches and cyberattack responses.

BFBM – Barroso Fontelles, Barcellos, Mendonça & Associados is experienced at handling data protection and privacy matters for major international corporations and domestic companies, with a particular focus on the banking, technology and telecoms sectors. Standing out for its skills in litigation before the superior and constitutional courts, the department is under the leadership of André Zanatta, who draws on his previous in-house experience at a Big Tech company to advise major tech clients on data privacy and information security breaches. Digital law specialist Eduardo Mendonça focuses on technology and data protection-related cases before the Brazilian superior courts. Felipe Terra assists with privacy and data breach cases, while associate Fernanda Mascarenhas supports clients with emerging tech matters and LGPD compliance issues.

BMA Advogados‘ data privacy and cybersecurity team is led by data privacy expert Felipe Palhares, who ‘stands out for his technical knowledge‘. The group specialises in sensitive cases, such as cyberattacks, ransomware attacks and data breach incidents, and routinely acts for domestic and international clients across the healthcare, technology, mining, energy and manufacturing sectors. The team is also well versed in LGPD compliance, international data transfers and M&A deals where data protection is a main concern. Senior associate Fernanda Villela Viana is another name to note for cybersecurity and data protection issues.

The privacy, technology and cybersecurity practice at Demarest Advogados advises domestic and international companies on the development of new products, LGPD compliance, data processing policies, and AI compliance. The team is led by Tatiana Campello, who stands out for ‘her ability to provide innovative and strategic legal solutions‘ in relation to data mapping, privacy-related document drafting and proceedings before the National Data Protection Authority (ANPD). Key support is offered by Cecília Cunha, who advises on compliance projects related to the LGPD.

Paulo Lilla heads up the technology, data protection and IP practice at Lefosse Advogados, which is well placed to assist its international and domestic client base with data protection compliance issues and urgent responses to cybersecurity incidents. Advising on the structuring of governance programmes, data breaches, and ransomware attacks are all key areas of activity for the department. Known for his expertise in matters concerning compliance with the Brazilian data protection law, practice head Lilla has a wealth of experience in time-sensitive situations, such as security incidents. Senior associate Carla Segala is knowledgeable of cyberlaw and data protection, while associate Mariana Sangoi advises on compliance projects in this space.

Boutique firm Prado Vidigal Advogados specialises in data protection and technology mandates, often advising on proceedings before the ANPD, and assisting with the data compliance aspects of M&A transactions, new products and services. The department - described by a client as 'an invaluable partner in navigating legal challenges in the digital age' - is also proficient in managing data breach and information security incidents. The team is jointly led by Luis Fernando Prado, noted for his 'very refined business vision', Paulo Vidigal, and Pedro Sanches, whose 'exceptional ability to articulate creative solutions to complex problems' is highlighted by clients. All practice heads are fully dedicated to data protection, privacy and technology matters.

Founded in 2023, VLK Advogados works across six different areas – ethical governance and data protection, cybersecurity and incident response, AI, creative economy and IP, strategic litigation, and lastly legal design and visual law. This combination of expertise allows it to advise on regulatory trends, carry out reviews and due diligence, as well as risk assessments of cybersecurity policies and incident response plans. Noted for his ‘good connections with regulatory bodies in Brazil‘, Rony Vainzof is a specialist in data protection, cybersecurity and AI governance matters. Caio Lima focuses on project mapping, policy reviews and data breaches, while Gisele Karassawa concentrates on digital law and projects involving legal design and data privacy.

Almeida Advogados‘ data protection team is led by digital law specialist Márcio Mello Chaves, who is experienced in assisting clients with digital and LGPD compliance projects. Clients from numerous sectors, most notably technology, pharmaceuticals and energy, regularly seek advice on the processing of personal data and on matters concerning digital law, information security and digital fraud. Mario Baldir Rodrigues Filho is a key associate in the team, who works in digital compliance projects and data privacy mandates.

Servicing a predominantly international client base, Campos Mello Advogados in cooperation with DLA Piper is adept in the drafting of data policies and contracts in compliance with the LGPD. In addition, the team is also proficient in data localisation issues and in the review of privacy clauses on local and international agreements, acting for companies across the technology, media and automotive sectors. Team lead Paula Mena Barreto regularly advises on privacy policies and compliance issues.

Recommended for its ‘deep legal knowledge, effective communication, and a client-focused approach‘, KLA Advogados‘ data protection practice assists its international and local client base – which operates in the healthcare, media, education, telecoms, retail, and IT sectors, among others – with risk assessments, the implementation of data protection compliance programmes, and data breaches. Led by associate Ana Carolina Cesar, the team is also instructed in the review of contracts, privacy policies and terms of use agreements. Daniele Dimas offers key assistance with non-contentious and litigation matters in this space.

Machado Meyer Sendacz e Opice Advogados combines its knowledge of digital law and data protection to assist clients with issues related to the LGPD and other data-related regulations. The team also provides support as a DPO, and handles data breaches and data protection due diligence for M&A transactions. Practice head Juliana Abrusio, a specialist in digital law, privacy, data protection and cybersecurity, advises on the structuring of new business models, incident responses and regulatory compliance. She is supported by a strong team of associates, which includes Maurício Antonio Tamer, a name to note for risk mitigation and management, and Chiara Battaglia Tonin, who is especially active in advising financial sector clients on the creation of customised privacy programmes.

The practice at Madrona Fialho Advogados concentrates on assisting domestic and multinational clients, including companies from the technology, healthcare, insurance, agribusiness, and food and beverage sectors, with LGPD compliance and other relevant regulation. In addition to advising on the implementation of multijurisdictional privacy compliance programmes and customised data protection plans, the group also assists with risk mitigation and responses to data breaches and ransomware attacks. Department head Bernardo Santos focuses on data mapping, and the design and implementation of data privacy compliance programmes.

Covering both contentious and non-contentious matters, Opice Blum e Bruno Advogados Associados fields a sizeable team which assists its international and Brazilian clientele – most notably names from the telecoms and financial services sectors – on complex data privacy and cybersecurity issues. Digital law specialist Renato Opice Blum, Marcos Bruno, who advises companies from the e-commerce, technology, media and entertainment segments,  José Roberto Opice Blum, Henrique Fabretti Moraes, and Danielle Serafino all co-lead the practice. Camilla Jimene advises on the processing of personal data, information security issues, cyberattacks and data leaks.

Trench Rossi Watanabe is skilled at assisting with data regulation compliance issues, including the implementation and review of LGPD compliance programmes, personal data transfers, cybersecurity incidents, and related litigation. Co-head Flávia Amaral has assisted a large number of clients with incident responses to cyberattacks, while Flavia Rebello focuses on proceedings before ANPD and compliance risks associated with new technologies.