1001Ferramentas
📜Validators

LGPD Privacy Policy Section Checker

Paste a policy written in Portuguese and see which of 10 sections the LGPD expects are covered: collection, purpose, sharing, rights, cookies, DPO, retention.

Sections

Which sections your privacy policy is missing

Data protection law rarely hands over a closed list of mandatory sections for a privacy policy, but the rights it grants the data subject imply a set of topics that in practice every policy has to cover. A policy omitting one of them tends to get flagged in an audit, and it is the kind of omission nobody notices until it is raised.

Paste the text and the page looks for signs of each topic: collection, purpose, sharing with third parties, subject rights, cookies, the data protection officer, retention period, security measures, international transfer and the update procedure. Whatever does not appear is listed as possibly absent.

The check works by presence of terms, not by reading meaning — it points at where to look, it does not certify compliance. A policy mentioning the word security in passing marks that topic as present while describing no measure at all. Use the result as a checklist for human review, not as a certificate. Real compliance depends on what is written and on what the company actually does.

Frequently asked questions

Does every company need a named officer?
Most frameworks provide for the role and several exempt small-scale processing from the formal appointment while keeping the requirement of a communication channel with the subject. When in doubt, having someone identified and a contact address covers the essentials and costs little.
Do I have to list every cookie?
Listing all of them is the most transparent practice and the one expected under stricter audit. The minimum is describing the categories, the purpose of each and how to refuse the non-essential ones. A policy merely saying the site uses cookies does not inform enough for consent to count as valid.
Does international transfer apply to me?
If you use any service hosted abroad — a cloud provider, an analytics tool, an email service — it applies. It is the most forgotten section precisely because the transfer happens through suppliers, without anyone consciously deciding to export data.

Related Tools