Last Wednesday at 10pm, I got an email from a cross-border e-commerce client. Small appliances. Planning to scale from Amazon US to the Brazil marketplace. Three months of customer profiling already done via AI. Then their corporate counsel asked one question — "Are you LGPD compliant?" — and the whole project froze.

This was my seventh inquiry of this exact type in 2026.

Here is what most Chinese sellers do not realize about Brazil's data regime:

LGPD has teeth now. ANPD (Brazil's data protection authority) started enforcing Article 52 in 2022. Fines run up to BRL 50 million per violation, accruing daily. Business suspension is on the table.

China is not on Brazil's whitelist. LGPD is structurally close to GDPR, but adds a Brazil-specific twist — every cross-border data flow must demonstrate "equivalent protection." There is no automatic comity with China. You self-certify or you do not transfer.

Three landmines for AI-driven customer profiling:

1. Collection consent (LGPD Art. 7) — "I agree to receive marketing" does not cover "used for AI training and profiling." Composite consent is void.

2. Automated decision review (LGPD Art. 20) — Brazilian users have the right to human review of any algorithmic decision. China's PIPL Art. 24 is similar in text but lighter in enforcement.

3. Cross-border transfer (LGPD Art. 33) — Running the model on a China-based server triggers LGPD outbound rules AND reverse-triggers China's CAC security assessment if you process over 1 million data subjects annually.

The translation trap. I see this every month. Sellers take their PIPL-style "checkbox consent" template, run it through machine translation into Portuguese, and ship. LGPD requires consent to be "free, informed, specific, unambiguous." Composite clauses fall as a block.

For Chinese cross-border teams entering LATAM, the compliance chain spans two civil-law jurisdictions. Single-jurisdiction counsel is rarely enough.

I work as a cross-border attorney out of the Greater Bay Area, partnering with Brazilian, Mexican, and Argentine firms on joint engagements. I read Spanish and Portuguese rulings in the original — no translation loss.

If you are scaling into LATAM and need a 30-minute compliance gap assessment, the booking link is below.

#CrossBorderLaw #DataPrivacy #LGPD #PIPL #LatAmExpansion

———
Mike Wu, Attorney-at-Law · Guangdong Jinglang Law Firm · License 144012510953782
Cross-border practice · 4 languages (CN/EN/ES/JA)
Site: wzklaw.com · Book consultation: wzklaw.com/booking.php
Bar verification: credit.acla.org.cn