Brazil has outlined possible penalties for companies that violate its General Law for the Protection of Personal Data (LGPD), unleashing a wave of work for Brazilian lawyers.

The much-awaited sanctions range from a warning or fine to a partial or total ban on carrying out activities related to data processing, with regulators promising to take mitigating and aggravating factors into account as they calculate fines.