Regarded by clients as ‘one of the best firms nationally‘ for data protection matters, Mattos Filho advises on the entire spectrum of privacy and cybersecurity issues. The firm has established itself as an authority in this field through its work in the development and implementation of sophisticated data compliance programmes and extensive experience in data incidents. A go-to choice for clients from the IT sector, the practice also acts for companies from the worlds of healthcare, insurance, financial services, retail and telecoms (among others) in negotiations with public authorities, risk assessments and litigation. The ‘highly technical and qualified‘ Fabio Ferreira Kujawski focuses on transactional, regulatory and contractual matters in the tech space, while Paulo Brancher ‘stands out for his extensive experience in IP‘, tech and telecoms. Thiago Luís Sombra is particularly skilled in anti-corruption, data protection and digital platform investigations, and often represents clients in contentious matters before the courts. Luiz Felipe Di Sessa, who joined in March 2022 from Cescon Barrieu, brought a wealth of experience in personal data protection and data processing compliance. Isabela Fernandes stands out at the associate level.

The cybersecurity and data protection-focused practice at Pinheiro Neto Advogados is lauded for its ability to 'navigate complex legal matters with precision and expertise'. The 'highly skilled and experienced team of lawyers' frequently assists clients across the healthcare, insurance, financial services and technology sectors in risk management, data breach remediation actions and judicial litigation, including proceedings before the superior courts. The firm, which has recently opened an office in Tokyo in an effort to grow its client base and workload in the region, is also well versed in the structuring and implementation of LGPD programmes. Noted by a client as 'one of the best lawyers in the legal market', Ciro Torres Freitas is singled out for his 'vast knowledge of technology, internet, and data protection law'. Technology expert Larissa Galimberti regularly assists companies in the implementation of data protection compliance programmes and structuring of new products. André Zonaro Giacchetta and José Mauro Decoussau Machado are names to note for contentious matters.

Clients operating in the telecoms, aviation, healthcare, financial services and technology sectors regularly turn to B/Luz for advice on the full array of data protection mandates. In addition to its strong capabilities in the structuring and development of programmes compliant with the Brazilian Data Protection Regulation (LGPD), the firm acts as data protection officers (DPOs) for several clients, and is experienced in cross-border data transfers and in the management of data leaks and cyberattacks. Fernando Bousso possesses ‘in-depth knowledge of technology and data privacy‘ and is counsel of choice for numerous start-ups and high-tech companies in privacy matters; he oversees the department with Pedro H. Ramos, who showcases strength in data protection compliance and tech-related transactions. These are also core areas of activity for Vanessa Pirró, who joined from KLA Advogados in April 2022. Below partner level, Adriane Loureiro Novaes is praised for her ‘deep regulatory knowledge‘ of technology and data protection issues.

At TozziniFreire Advogados, the women-led data protection team - praised for its 'exceptional expertise and comprehensive understanding of data protection laws and regulations' - handles a variety of non-contentious and contentious matters, ranging from data breaches to compliance programmes, impact assessments and due diligence exercises. Marcela Waksman Ejnisman leads on consulting matters, including regulatory and contractual work related to training and data compliance projects. Data sharing agreements and breaches are among Carla do Couto Hellu Battilana's core areas of activity, while IP, technology and digital law specialist Luiza Sato is often engaged in the structuring and implementation of LGPD-compliant programmes and policies. The firm's litigation capabilities are also noteworthy; Patricia Helena Marta Martins steers the group in an array of administrative and judicial litigation matters, including high-profile cases involving tech giants and AI. Bruna Borghi Tomé and Sofia Gaviao Kilmar are other names to note for sensitive class actions, individual lawsuits, and administrative proceedings in this space.

The privacy and data protection group at Azevedo Sette Advogados offers both consultancy and litigation services as part of its wider TMT practice. Typical mandates range from assisting in the elaboration and implementation of data compliance programmes to advising on internet and tech-related privacy issues. Judicial and administrative proceedings also feature in the workload managed by the subgroup focused on civil litigation. Department leader Ricardo Barretto Ferreira Da Silva is experienced in contentious and non-contentious matters in all areas of TMT, namely internet, telecoms and IT. Lorena Pretti Serraglio left the firm in October 2023.

BFBM – Barroso Fontelles, Barcellos, Mendonça & Associados leverages its ‘in-depth knowledge of cybersecurity and personal data protection’ to advise clients from the telecoms, technology and banking sectors on a range of privacy matters. Assisting with the structuring of LGPD-compliant programmes and policies is a key strength for the department, which is active in both non-contentious issues and litigation. André Zanatta, whose previous in-house experience in Big Tech is noteworthy, excels in tech and privacy-related class actions. Eduardo Mendonça handles numerous sensitive enforcement cases related to user privacy, and shines on cases before the superior courts. Associate Fernanda Mascarenhas assists with a range of consulting, administrative and regulatory matters related to data breaches and data privacy.

The data privacy and cybersecurity practice at BMA Advogados is skilled in responding to adverse scenarios and managing security and cyberattack crises, including ransomware cases. In addition to its crisis management and litigation capabilities, the 'team of highly qualified professionals' is also regarded for its experience in data compliance projects and data transfers. 'Well-known for his knowledge of privacy', Felipe Palhares is the main reference in the team for domestic and international clients seeking advice on the processing of personal data, new product launches, interactions with regulators and data breaches. Bárbara de Oliveira Iszlaji and Fernanda Villela Viana are also active in the practice.

Campos Mello Advogados in cooperation with DLA Piper assists both Brazilian and international clients from a variety of industries, such as technology, automotive and media, in data protection and privacy issues. The practice is prepared to advise on the processing of personal data, LGPD compliance matters, and in the drafting and review of privacy clauses. The firm also takes advantage of its corporate criminal law expertise to provide preventive and reactive assistance in the context of cybersecurity incidents. Paula Mena Barreto, who is especially active in the implementation of privacy policies and compliance matters, jointly leads the group with Ricardo Caiado Lima, who coordinates all preventive compliance advice. Associates Ana Paula Pitta de Moura, Gisela de Lamare de Paiva Coelho and Ana Luisa Bastos Ramos are also noted for their experience in LGPD-related matters.

Daniel Law provides legal support to leading technology, banking, food, and healthcare companies in relation to data protection compliance projects, privacy incidents and security responses. Nuria López handles contentious and non-contentious matters in this space, demonstrating particular knowledge of privacy issues and AI; she jointly leads the group with Andre Oliveira and IP specialist Robert Daniel-Shores.

Rated for its 'deep technical knowledge', the data protection, cybersecurity and technology-focused practice at Demarest Advogados is retained by multinationals which manage large volumes of data and seek regular advice on LGPD-related compliance issues and risk management. The team is well equipped to handle the data protection implications of corporate transactions, and data breaches. Leading the practice is Tatiana Campello, who combines her privacy, technology and cybersecurity knowledge to assist a wide range of clients in all their data privacy issues, including AI-related matters. Associate Cecília Cunha is well versed in a variety of data privacy and anti-corruption mandates. Eduardo Magrani is no longer at the firm.

Dias Carneiro Advogados assists multinational and domestic companies with a slew of cybersecurity matters. Clients, ranging from banks, video game publishers, schools and AI companies, turn to the team for advice on the drafting of privacy policies, data transfer negotiations, audits and crisis management. Vanessa Pareja Lerner, who is at the helm of the practice, regularly works with start-ups and established companies on matters related to the processing and collection of personal data. Focused on technology, data protection and cybersecurity issues, associate Paula Eid Pagani is experienced in the development of data compliance programmes in accordance with the LGPD.

International and local clients, including companies from the energy, technology, banking and entertainment sectors, seek KLA Advogados' assistance in a range of privacy and data protection matters. The 'highly technical and available' firm is adept at advising on the implementation of LGPD compliance programmes, risk assessments and data transfers. Data breaches, both from a consulting and litigation perspective, are another key area of strength for the practice, which is led by the 'very technical, available and up-to-date' Ana Carolina Cesar.

Noted for its ability to work ‘with clients across borders and languages‘, Lefosse Advogados fields a data protection team which is adept at handling data breaches, information security incident responses and day-to-day compliance matters. The team is called upon by clients operating in a variety of economic sectors, namely agribusiness, technology, tourism and e-commerce, in relation to the implementation of new digital business models and in the negotiation of technology contracts. Paulo Lilla, ‘a standout member of the data privacy practice‘, brings together expertise in internet, technology, privacy and data protection. These are all core areas of focus for senior associate Carla Segala.

Notable for its experience in corporate transactions and the protection of intangible assets, Madrona Fialho Advogados is well positioned to advise on an array of data protection compliance matters. Lucas Spadano leads the IP, data protection and international trade teams. Bernardo Santos, who was promoted to partner in February 2023, often acts for clients in the structuring and development of multijurisdictional privacy compliance programmes; his areas of expertise also cover risk assessments, data sharing and processing agreements. Newly promoted partner Luiza Tângari handles IP-related data protection issues.

With extensive expertise in technology and digital law, Opice Blum e Bruno Advogados Associados is equipped to act for clients in a range of contentious and non-contentious cybersecurity and privacy matters. Renato Opice Blum and Marcos Bruno specialise in digital law matters. Other key individuals in the practice include Camilla Jimene, who handles advisory and litigation mandates involving the processing of personal data, cyberattacks and digital fraud; Henrique Fabretti Moraes; and AI and data protection specialist Juliano Maranhão. Associate Tiago Neves Furtado assists the team in all data protection matters. Rony Vainzof and Caio César Carvalho Lima left the firm in June 2023.

Founded in 2020, boutique firm Prado Vidigal Advogados is entirely devoted to technology and privacy law issues. The practice is particularly well positioned to assist tech companies in the structuring of their privacy compliance programmes, day-to-day LGPD matters, data breaches and litigation. Co-head Luis Fernando Prado, ‘an excellent professional with deep knowledge of data privacy‘, ‘provides high quality expertise‘ to a varied roster of clients. Fellow co-leader Paulo Vidigal specialises in data protection, privacy and technology matters. Pedro Sanches, who was promoted to partner in December 2022, is also recommended for his experience in this space.

The data privacy and cybersecurity team at Veirano Advogados acts for a mix of domestic and international companies, with a particular focus on the IT, e-commerce and electronic payments sectors, in LGPD compliance matters, risk assessments, and security incidents. The team is led by Fábio Pereira, whose ‘deep knowledge of all data privacy related matters‘ is rated by clients. Ana Claudia Beppu joined the team in January 2023 from Mundie e Advogados, and is proficient in privacy mandates within the telecoms, media and technology segments. Associate Denise Louzano is adept at conducting a range of data assessments and reviewing policies in light of updates to data privacy regulations, while senior associate Isabel Hering is noted for her experience in consulting matters, data breaches and cyberattacks.