If your site has visitors in Brazil, the LGPD applies wherever your company is based. Scan any URL in 30 seconds to see what loads before consent and whether your banner lets visitors say no.
No credit card required · Instant insights
Article 3 of the LGPD covers processing of data from people who are in Brazil at the time of collection, regardless of where the company is based.
A US or European site that sets cookies on Brazilian visitors is in scope, and there is no revenue threshold like California's.
The ANPD's cookie guide (October 2022) follows the European line: consent for non-essential cookies, a button to reject all of them on the first layer, nothing pre-ticked, no implied consent from continued browsing, and a way to withdraw consent later.
It also flags cookie information offered only in a foreign language: Brazilian visitors should get it in Portuguese.
Audience analytics can rely on legitimate interest in limited cases: aggregated data, no profiling and no combination with other trackers. Advertising cookies still need consent.
The LGPD also requires the contact details of the data protection officer (encarregado) to be published, preferably on the website (Article 41).
CookieInspector loads your page in a real browser, records every cookie, script and request before anyone clicks, then accepts the banner and records what changes.
You see trackers that fire before consent, whether a reject option exists, which consent platform you use and whether your policy links are reachable.
The LGPD allows fines of up to 2% of a company's revenue in Brazil for the previous year, capped at R$ 50 million per infringement (Article 52).
Consumer protection agencies (Procon) can also act on privacy complaints.
“Most LGPD content explains the law. CookieInspector shows you, with evidence from your own site, which trackers fire before consent and what your banner actually does.”
The LGPD does not mention banners, but it requires a legal basis and transparency. When non-essential cookies rely on consent, the ANPD's cookie guide describes the banner as the way to collect and record that choice.
Very close. The main differences are that aggregated audience analytics may rely on legitimate interest, and that cookie information should be available in Portuguese.
Yes, when the data comes from people located in Brazil at the time of collection (Article 3), regardless of where the company is based.
Up to 2% of revenue in Brazil for the previous year, capped at R$ 50 million per infringement, plus daily fines and publicity of the infringement (Article 52).
See exactly what's running on your site right now.
Run a free scanNo credit card required · Instant insights