Yes, scraping public data in Brazil is generally permitted, but compliance with privacy and data protection laws is mandatory. Publicly accessible data may be collected, yet restrictions apply to personal or sensitive information under LGPD and other regulations.
Key Regulations for Scraping Public Data in Brazil
- LGPD (Law No. 13.709/2018): Prohibits scraping personal data without a lawful basis (e.g., consent, legitimate interest). The ANPD (National Data Protection Authority) enforces penalties up to 2% of a company’s revenue for violations.
- Access to Information Law (Law No. 12.527/2011): Allows scraping of government-held public data, but automated collection must not disrupt systems or violate terms of service. Requests for bulk data may require formal authorization.
- Civil Code (Art. 20): Unauthorized scraping of personal data for commercial purposes may constitute an invasion of privacy, exposing entities to civil liability under judicial review.
Scraping public data in Brazil hinges on the nature of the data and compliance with LGPD. Personal or sensitive information requires explicit justification, while anonymized or aggregated public data faces fewer restrictions. Entities must conduct a Legitimate Interest Assessment (LIA) and document compliance under ANPD guidelines. Recent 2026 regulatory updates emphasize stricter enforcement of automated data collection, particularly for large-scale operations targeting Brazilian users. Failure to adhere risks administrative fines, injunctions, or criminal charges under the Penal Code.