AI Governance Engineer
GitHub

Brazil LGPD Art. 20: review of automated decisions

A data subject may request review of decisions taken solely on automated processing that affect their interests, incl. profiling, and the controller gives clear information on the criteria and procedures used

By Reviewed

From clause to evidenceThe chain from Brazil LGPD Art. 20 to its evidence record, in 6 steps; the text alternative lists them and the facts under the figure state each in full.Clause: Brazil General Data Protection Law (LGPD, Lei 13.709/2018), LGPD Art. 20ClauseBrazil LGPDLGPD Art. 20Duty holder: ControllersDuty holderControllersApplies from: 2020-09-18 (In force)Applies from2020-09-18In forceArtefact: Review workflow; statement of criteria and procedures per systemArtefactReview workflowLayers: Layer 04 Runtime Controls & Observability and Layer 05 Assurance & Continuous ComplianceLayersLayer 04Layer 05Evidence record: the common evidence record (Evidence record v1)Evidence recordEvidence recordv1Same topic elsewhere: no crosswalk topic files this clause yetAs of 2026-09-24 · illustrative, not a claim of conformity From clause to evidenceThe chain from Brazil LGPD Art. 20 to its evidence record, in 6 steps; the text alternative lists them and the facts under the figure state each in full.Clause: Brazil General Data Protection Law (LGPD, Lei 13.709/2018), LGPD Art. 20ClauseBrazil LGPD · LGPD Art. 20Duty holder: ControllersDuty holderControllersApplies from: 2020-09-18 (In force)Applies from2020-09-18 · In forceArtefact: Review workflow; statement of criteria and procedures per systemArtefactReview workflowLayers: Layer 04 Runtime Controls & Observability and Layer 05 Assurance & Continuous ComplianceLayersLayer 04Layer 05Evidence record: the common evidence record (Evidence record v1)Evidence recordEvidence record v1Same topic elsewhere: no crosswalk topicfiles this clause yetAs of 2026-09-24illustrative, not a claim of conformity
From clause to evidence Build the artefact, then file every output it produces as a record that names AIGE-OBL-BR-LGPD-ART20. Drawn from chapter 08.
Text alternative
  • Clause: Brazil LGPD, LGPD Art. 20.
  • Duty holder: Controllers.
  • Applies from: 2020-09-18, In force.
  • Artefact: Review workflow.
  • Layers: Layer 04, Layer 05.
  • Evidence record: Evidence record v1.
  • Record schema: Evidence record.
  • No crosswalk topic files this clause yet.
When this obligation applies2 dates of AIGE-OBL-BR-LGPD-ART20 on a time axis, against its review date 2026-09-24.Earlier2024202620282030As of 2026-09-242020-09-18 · In forceto be confirmed;administrative sanctionsfrom 2021-08-012021-08-01 · Later stepAdministrative sanctions(Arts. 52 to 54) apply2020-09-18 · In force · to be confirmed; administrative sanctions from 2021-08-012021-08-01 · Later step · Administrative sanctions (Arts. 52 to 54) applySource: Obligation register(chapter 08)
When this obligation applies2 dates of AIGE-OBL-BR-LGPD-ART20 on a time axis, against its review date 2026-09-24.2020-09-18 · In forceto be confirmed; administrative sanctions from2021-08-012021-08-01 · Later stepAdministrative sanctions (Arts. 52 to 54)apply2024202620282030EarlierAs of 2026-09-242020-09-18 · In force · to be confirmed; administrative sanctions from 2021-08-012021-08-01 · Later step · Administrative sanctions (Arts. 52 to 54) applySource: Obligation register (chapter 08)
When this obligation applies The first date in the row's status, then each later step: filled once its date has passed, outlined while it is still ahead of the review date.
Data table: the dates
Dates of AIGE-OBL-BR-LGPD-ART20
DateStepDetail
2020-09-18In forceto be confirmed; administrative sanctions from 2021-08-01
2021-08-01Later stepAdministrative sanctions (Arts. 52 to 54) apply
Id
AIGE-OBL-BR-LGPD-ART20
Instrument
Brazil General Data Protection Law (LGPD, Lei 13.709/2018) law
Clause
LGPD Art. 20
In scope
Controllers
Authority
ANPD (national data protection authority)
Applies from
In force · to be confirmed; administrative sanctions from 2021-08-01
Later dates
  • Administrative sanctions (Arts. 52 to 54) apply

The artefact that evidences it

Review workflow; statement of criteria and procedures per system.

Patterns that build it

No pattern in the catalogue names this clause on its "Maps to" line yet; the artefact above is the engineering answer.

Source

Chapter 08, section Other jurisdictions, checked against its sources on the review date above.

Machine-readable

Cite this obligation

García Aibar, J. (2026). Brazil LGPD Art. 20: review of automated decisions (AIGE-OBL-BR-LGPD-ART20). In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0). https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/obligations/aige-obl-br-lgpd-art20. CC BY 4.0

BibTeX

@misc{aige2026obligation,
  author       = {Jorge García Aibar},
  title        = {{Brazil LGPD Art. 20: review of automated decisions (AIGE-OBL-BR-LGPD-ART20)}},
  howpublished = {In AI Governance Engineering: The Thesis \& Body of Knowledge},
  year         = {2026},
  version      = {0.5.0},
  doi          = {10.5281/zenodo.22956197},
  url          = {https://aigovernanceengineer.com/obligations/aige-obl-br-lgpd-art20},
  note         = {Version 0.5.0}
}