Your data, your rules: what data protection law has to do with AI
Brazil has a law with a long name and a simple idea: the LGPD, the General Data Protection Law (the European cousin is the GDPR). It says your data is yours, and whoever uses it needs a fair reason and your awareness.
What changes when AI is involved?
An AI eats data, as we have seen around here. If a company uses your ID number, your photo or your purchase history to train or decide something with AI, the law applies just the same.
The rights that fit in your pocket
- To know. You can ask which data the company holds about you.
- To correct. Wrong data? You can ask to fix it.
- To delete. In many cases, you can ask for it to be erased.
- To understand automated decisions. If an AI denied your credit or your job application, you can ask for the decision to be reviewed.
How to ask, in practice
Every company must have a channel for this, usually called a data protection officer or "DPO". Look on the website, in the privacy policy or in the app. Write simply: "I want to know what data you hold about me and how it is used." They have a deadline to answer.
And the world?
The European Union created a law just for AI, the AI Act, which classifies systems by risk. The more sensitive the use (health, justice, employment), the more rules. Brazil is discussing a similar path. Remember the name: it will show up in the news.
Keep this
You do not need to understand technology to exercise a right. You only need to know it exists.