Free checkup
  1. Home
  2. Library

Guide

AI and your customers’ data: what Brazilian law requires.

Day to day

What to do in practice.

  1. 01

    Use only the data you need

    To book an appointment, a name and phone number are enough. Asking for more than the task needs goes against the law’s necessity principle.

  2. 02

    Say what the data is for

    Tell customers they are talking to an AI assistant and what their information will be used for. Where there are cameras, post a visible notice.

  3. 03

    Choose the tool carefully

    Do not paste customer data into free AI tools without knowing where it is stored. Prefer tools with a contract and privacy settings.

  4. 04

    Take extra care with sensitive data

    Health and biometric data have stricter rules. In a clinic, AI can book the appointment but never gives health advice.

  5. 05

    Have a channel for customers

    Customers may ask to see, correct or delete their data (art. 18) and may ask for a review of a decision made solely by an automated system (art. 20).

How Lotaloja works

  • We never ask for personal passwords or bank details
  • Minimum access, through each platform’s official tools
  • No facial recognition in our standard work
  • AI never gives health, legal or financial advice

This guide covers the basics of Law 13,709/2018 and is not legal advice.

Questions

Quick answers.

Can I use an AI camera in my shop?

Yes, with a clear purpose such as security and operations, a visible notice that the place is filmed and access to footage limited to those who need it.

Who enforces the LGPD?
Does this guide replace a lawyer?

No. It explains the basics. For a specific case, talk to a lawyer.

Start with the free checkup.

Six questions and three minutes, with your Google account. You get a written list of the tasks that can be automated and decide what comes next.