Law / Brazil

Consumer Protection Code, consumer databases and registries

Lei nº 8.078, de 11 de setembro de 1990 (Código de Proteção e Defesa do Consumidor), art. 43

In force.

A data subject rights rule binding public and private bodies.

Obligation class: Data subject rights, Disclosure, Retention

What it requires

Give the consumer access, on request, to the information kept on him or her in registries, files and records, and to its sources.
Keep consumer registries and data objective, clear, true and in easily understood language, with no negative information covering more than five years.
Tell the consumer in writing when you open a registry on him or her that the consumer did not ask for.
Correct inaccurate data immediately when the consumer asks, and tell the recipients of the incorrect information of the change within five business days.
Do not supply, once a consumer debt is time-barred, information that could hinder the consumer's new access to credit.

These lines are LexLint's reading of the law's text.

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

The consumer has access to the information held in registries, files, records and personal and consumption data kept on him or her, and to their sources. Consumer registries and data must be objective, clear, true and in easily understood language, and may not contain negative information covering a period longer than five years. The opening of a registry that the consumer did not request must be communicated to the consumer in writing.

A consumer who finds an inaccuracy may demand immediate correction, and the keeper must tell the recipients of the incorrect information of the change within five business days. Consumer databases and registries and credit-protection services are considered entities of a public character. Once the limitation period on a consumer debt has run, the credit-protection systems may not supply information that could hinder the consumer's new access to credit.

When LexLint raises it

When your app profile says your app processes personal data.

Back to the example · Lint your app

Page updated 7 November 2026.