Files
hermes-brain/projects/passepartout/strategy/compliance/compliance-regimes/lgpd.org
Hermes 6e992cc0c5 Restructure three-pronged → knowledge-layers: collapse 11 files to 3, integrate into main architecture
- Rename 'three-pronged' folder to 'knowledge-layers' — prong metaphor
  was misleading (implied parallel tines), replaced with epistemic layers
  (deductive base, empirical middle, probabilistic oracle — vertical stack)
- Collapse 11 overlapping files into 3 coherent documents:
  - knowledge-layers/_index.org: core framework (two engines + one store,
    World Model formula, 0-14 layer table, provenance store design,
    conflict resolution, cold-start, stage mapping)
  - knowledge-layers/practical-implications.org: design-world-aware-of-
    physics, 10 powers, Schafmeister existence proof, epistemic transparency
  - knowledge-layers/neurological-empirical.org: neural networks in
    provenance framework (kept intact)
- Relocate wolfram/mathematica and Schafmeister docs to ideas/viability/
- Integrate into main architecture _index.org:
  - Gate: expanded from two vectors (ACL2+LLM) to three (deductive,
    provenance/empirical, LLM oracle)
  - Autodidactic loop: split into Track 1 (deductive hardening, fast)
    and Track 2 (empirical validation, slow, experimental-feedback-driven)
  - See also: added Knowledge Layers cross-reference
- Add all-lisp geometry engine note (ideas/lisp-geometry-engine.org) as
  concrete illustration of the empirical layer's effect on design work
- Rebuild site: 148 files, 0 errors
2026-06-04 19:09:44 +00:00

1.3 KiB

LGPD

Brazil's comprehensive privacy law (effective 2020, fines effective 2023). Modeled on GDPR but with differences: LGPD defines "data processing agents" (controller and operator), requires appointment of DPO (data protection officer), mandates breach notification to ANPD (National Data Protection Authority) and affected data subjects. 10 legal bases for processing (vs 6 in GDPR).

Penalties: Up to 2% of revenue in Brazil per violation, capped at 50M BRL (~$10M) per violation. ANPD can also order suspension of processing, partial or total prohibition of database operation.

Who must comply: Any organization (public or private) processing personal data of Brazilian residents, regardless of where the organization is based. No revenue threshold.

Why it matters: LGPD affects every business operating in Latin America's largest economy. The 2% revenue penalty structure creates strong economic incentive. First-mover advantage: fewer compliance automation vendors in the Portuguese market. A Portuguese-language gate package with LGPD-specific consent and data subject rights gates captures a market of 210M people.