LexLint.ioBeta

Know the law your code answers to.

Law / Brazil

Internet Civil Framework, user rights over personal data

Lei nº 12.965, de 23 de abril de 2014 (Marco Civil da Internet), art. 7º

In force.

A data subject rights rule binding public and private bodies.

Obligation class
Data subject rights, Consent, Disclosure

What it requires

  • Do not supply a user's personal data, including connection records and application access records, to third parties unless the user gives free, express and informed consent or the law provides for it.
  • Give the user clear and complete information on how personal data are collected, used, stored, processed and protected, and use them only for purposes that justify the collection, that the law does not prohibit and that the service contract or terms of use specify.
  • Obtain the user's express consent to the collection, use, storage and processing of personal data, given apart from the other contract clauses.
  • Delete definitively, when the user asks at the end of the relationship, the personal data the user supplied to the application, except records that the law requires you to keep.

These lines are LexLint's reading of the law's text.

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

The internet user is assured the inviolability of intimacy and private life, their protection and compensation for material or moral damage from their violation. The user's personal data, including connection and application access records, may not be supplied to third parties except with free, express and informed consent or in the cases the law provides.

The user is entitled to clear and complete information on the collection, use, storage, processing and protection of personal data, which may be used only for purposes that justify the collection, are not prohibited by law and are specified in the contract or terms of use. The user's consent to the collection, use, storage and processing of personal data must be express and set apart from the other contract clauses.

The user may require the definitive deletion of the personal data supplied to an internet application, at the end of the relationship between the parties, except for records that this Law or the data protection law require to be kept.

When LexLint raises it

When your app profile says your app processes personal data.

Back to the example  ·  Lint your app

Page updated .