Brazil's Lei Geral de Proteção de Dados (LGPD) has transformed data privacy requirements for organizations operating in Latin America's largest economy. With over 215 million people and a highly digital population, Brazilian personal data flows through countless business processes—from financial services requiring CPF verification to healthcare records, employment documents, and e-commerce transactions. Organizations must protect this data while navigating LGPD's comprehensive requirements for consent, data subject rights, and security measures.
Our Brazil-specific redaction capabilities combine regulatory expertise with native Portuguese language processing. We detect and validate Brazilian identifiers like CPF and CNPJ using official algorithms, recognize Brazilian naming patterns and address formats, and support the full range of personal data categories defined by LGPD. This enables organizations to protect Brazilian personal data systematically while maintaining the business utility of their documents and datasets.
Understanding LGPD
LGPD establishes comprehensive data protection requirements:
Personal Data (Dados Pessoais):
- Information related to an identified or identifiable natural person
- Includes: name, identification numbers, location data, electronic identifiers
- Extends to any data that could identify someone directly or indirectly
Sensitive Personal Data (Dados Pessoais Sensíveis):
- Racial or ethnic origin
- Religious or philosophical beliefs
- Political opinions
- Trade union membership
- Health data
- Genetic or biometric data
- Data relating to sex life or sexual orientation
Key LGPD Principles:
- Purpose, adequacy, and necessity limitations
- Transparency with data subjects
- Data quality and accuracy
- Security and prevention measures
- Non-discrimination
- Accountability and demonstration of compliance
CPF Number Detection
The Cadastro de Pessoas Físicas is Brazil's primary individual identifier:
CPF Format:
Format: XXX.XXX.XXX-XX (11 digits)
Example: 123.456.789-09
Structure:
- First 9 digits: Base number
- Last 2 digits: Verification digits
Validation algorithm:
First check digit:
Sum = d1×10 + d2×9 + d3×8 + d4×7 + d5×6 + d6×5 + d7×4 + d8×3 + d9×2
Remainder = Sum mod 11
Check1 = 11 - Remainder (if ≤ 1, Check1 = 0)
Second check digit:
Sum = d1×11 + d2×10 + d3×9 + d4×8 + d5×7 + d6×6 + d7×5 + d8×4 + d9×3 + Check1×2
Remainder = Sum mod 11
Check2 = 11 - Remainder (if ≤ 1, Check2 = 0)
Example validation:
CPF: 529.982.247-25
- Check digit 1 calculation → 2 ✓
- Check digit 2 calculation → 5 ✓
- Valid CPF
Detection Patterns:
// With formatting
123.456.789-09
// Without formatting
12345678909
// Variations
CPF: 123.456.789-09
CPF nº 12345678909
Cadastro: 123.456.789-09
CNPJ Number Detection
Corporate identifier for Brazilian legal entities:
CNPJ Format:
Format: XX.XXX.XXX/YYYY-ZZ (14 digits)
Example: 11.222.333/0001-81
Structure:
- First 8 digits: Base registration number
- /YYYY: Branch identifier (0001 for headquarters)
- -ZZ: Verification digits
Validation algorithm (similar to CPF):
First check digit:
Weights: [5,4,3,2,9,8,7,6,5,4,3,2]
Sum = Σ(digit × weight)
Remainder = Sum mod 11
Check1 = 11 - Remainder (if < 2, Check1 = 0)
Second check digit:
Weights: [6,5,4,3,2,9,8,7,6,5,4,3,2]
Including first check digit
Same calculation
Detection Patterns:
// With formatting
11.222.333/0001-81
// Without formatting
11222333000181
// Variations
CNPJ: 11.222.333/0001-81
CNPJ nº 11222333000181
RG (Identity Document) Detection
State-issued general registry identification:
RG Characteristics:
// Format varies by issuing state
// Common patterns:
São Paulo (SSP-SP):
XX.XXX.XXX-X or XXXXXXXXX
Example: 12.345.678-9
Rio de Janeiro (DETRAN-RJ):
XX.XXX.XXX-X
Example: 11.222.333-4
Minas Gerais (SSP-MG):
MG-XX.XXX.XXX
Example: MG-12.345.678
// Contextual detection
RG: 12.345.678-9
Identidade: 123456789
Registro Geral nº 12345678-9
RG/SSP-SP: 12.345.678-9
Brazilian Names
Brazilian naming conventions for detection:
Name Structure:
// Brazilian names typically include:
- Given name(s): João Pedro
- Mother's family name(s): Silva
- Father's family name(s): Santos
// Full name example:
João Pedro Silva Santos
Maria Eduarda Oliveira Costa
// Common patterns:
- Multiple given names common
- Multiple surnames (maternal + paternal)
- Compound surnames (without hyphen usually)
- Religious or indigenous names
// Top surnames:
Silva, Santos, Oliveira, Souza, Lima
Pereira, Costa, Ferreira, Rodrigues, Almeida
Name Detection:
// Detection considers:
- Common Brazilian first names database
- Common Brazilian surname database
- Compound name patterns
- Context indicators (Sr., Sra., Dr., nome:)
Brazilian Addresses
Address format and postal code detection:
Address Structure:
// Standard format:
Rua [Street Name], [Number] - [Complement]
[Neighborhood]
[City] - [State]
CEP: [Postal Code]
// Example:
Rua das Flores, 123 - Apto 45
Jardim Paulista
São Paulo - SP
CEP: 01310-100
// Components:
- Logradouro: Rua, Avenida, Alameda, Travessa, etc.
- Número: Building number
- Complemento: Apartment, suite, floor
- Bairro: Neighborhood
- Cidade: City
- Estado: State (2-letter abbreviation)
- CEP: 8-digit postal code (XXXXX-XXX)
CEP Postal Code:
Format: XXXXX-XXX (8 digits)
Example: 01310-100
Structure:
- First 5 digits: Region + subregion
- Last 3 digits: Specific location
Detection patterns:
CEP: 01310-100
CEP 01310100
Código Postal: 01310-100
Brazilian Phone Numbers
Phone number formats in Brazil:
// Mobile phones (9 digits, starting with 9)
(11) 99999-9999 // São Paulo mobile
+55 11 99999-9999 // With country code
// Landlines (8 digits)
(11) 3333-4444 // São Paulo landline
+55 21 2222-3333 // Rio de Janeiro
// Format variations:
(XX) XXXXX-XXXX // Mobile with area code
(XX) XXXX-XXXX // Landline with area code
55 11 999999999 // Without formatting
+55 (11) 99999-9999 // Full international
// Area codes (DDD):
11 - São Paulo
21 - Rio de Janeiro
31 - Belo Horizonte
41 - Curitiba
51 - Porto Alegre
// ... 67 area codes total
Financial Identifiers
Brazilian financial documents contain specific identifiers:
Bank Account Information:
// Brazilian bank account format:
Banco: [Bank Code]
Agência: [Branch Number]-[Check Digit]
Conta: [Account Number]-[Check Digit]
// Example:
Banco: 001 (Banco do Brasil)
Agência: 1234-5
Conta: 123456-7
// Major bank codes:
001 - Banco do Brasil
033 - Santander
104 - Caixa Econômica
237 - Bradesco
341 - Itaú
PIS/PASEP/NIT:
// Social Integration Program number
Format: XXX.XXXXX.XX-X (11 digits)
Example: 123.45678.90-1
// Used for:
- Employment records
- FGTS (employment fund)
- Social security
Healthcare Identifiers
Brazilian healthcare document identifiers:
// Cartão SUS (Cartão Nacional de Saúde)
Format: XXX XXXX XXXX XXXX (15 digits)
Example: 123 4567 8901 2345
// CRM (Medical License)
CRM/[State] [Number]
Example: CRM/SP 123456
// Health insurance (Plano de Saúde)
Various formats per provider
LGPD Compliance Considerations
Regulatory requirements affecting redaction:
Data Subject Rights:
- Access to personal data
- Correction of incomplete or inaccurate data
- Anonymization, blocking, or deletion of unnecessary data
- Data portability
- Information about sharing with third parties
- Consent revocation
Anonymization Standard:
- LGPD allows processing of anonymized data without consent
- Anonymization must be irreversible using reasonable technical means
- Pseudonymization keeps data subject to LGPD
- Redaction can support anonymization but consider re-identification risks
Cross-Border Transfer:
- Transfers to countries with adequate protection permitted
- Standard contractual clauses for other transfers
- Redaction before transfer can simplify compliance
Industry-Specific Requirements
Brazilian sector regulations complement LGPD:
Financial Services (Banco Central):
- Resolution 4.658 cybersecurity requirements
- Open Banking data sharing rules
- PIX payment system data protection
Healthcare (ANS/ANVISA):
- Health data handling requirements
- Medical record retention rules
- Telemedicine data protection
Telecommunications (ANATEL):
- Subscriber data protection
- Call detail record handling
- Location data restrictions
API Configuration
POST /v1/redact
{
"text": "Cliente: João Silva, CPF: 529.982.247-25, Tel: (11) 99999-8888",
"country": "BR",
"redaction_types": ["cpf", "cnpj", "rg", "name", "phone", "address"],
"options": {
"validate_checksums": true,
"language": "pt-BR"
}
}
Response:
{
"redacted_text": "Cliente: [NAME], CPF: [CPF], Tel: [PHONE]",
"detections": [
{
"type": "name",
"value": "João Silva",
"confidence": 0.95
},
{
"type": "cpf",
"value": "529.982.247-25",
"valid_checksum": true,
"confidence": 0.99
},
{
"type": "phone",
"value": "(11) 99999-8888",
"format": "mobile",
"confidence": 0.98
}
],
"compliance": ["LGPD"]
}
