The General Law for Protection of Personal Data (LGPD) establishes rules for the use, collection, storage and sharing of personal data. This law determines that every citizen must be informed of how the data provided to companies and public agencies will be used, and then expressly agree to the collection of personal data, as well as its use for specific purposes. Companies that do not comply with the LGPD are subject to sanctions ranging from a warning, a fine, to the deletion of data under processing.