Relatório de Impacto à Proteção de Dados (RIPD) — LGPD

Overview

Draft and validate Data Protection Impact Reports (RIPD) under Brazil’s LGPD (Lei 13.709/2018) and ANPD guidance. Risk assessment for high-risk or large-scale processing (E-commerce, Health, and all sectors). Validates that the chosen legal basis (e.g. Legitimate Interest — Art. 7, IX) has the balancing test documented per ANPD Guia Orientativo.

Extension tools

• legal_basis_validator — Checks that when the chosen legal basis is Legítimo Interesse (Art. 7, IX LGPD), the document contains a documented balancing test (teste de balanceamento) per ANPD Guia Orientativo: (1) Finalidade (specific, explicit and legitimate purpose), (2) Necessidade (proportionality and necessity of the processing), (3) Balanceamento e salvaguardas (controller interests vs. data subject rights). Run it on the RIPD or processing record after filling in the legal basis.

Getting Started

Add your source materials to the project workspace, then activate the LGPD Data Protection Impact Report (RIPD) skill. Use the template (assets/template_ripd.md) to structure the report and run legal_basis_validator on the draft to ensure the balancing test is documented when Legitimate Interest applies.