Data Subject Rights
Last updated: May 2026
As the subject of the personal data, you have 9 rights guaranteed by Brazil’s General Data Protection Law (LGPD — Lei Geral de Proteção de Dados, Law 13,709/2018, Art. 18). This page explains each one and how to exercise it with OODA Intelligence.
The rights at a glance
| # | Right (Art. 18) | What it means in practice |
|---|---|---|
| 1 | Confirmation | Finding out whether we process any data about you |
| 2 | Access | Receiving a copy of your data in a readable format |
| 3 | Correction | Asking us to correct data that is wrong or incomplete |
| 4 | Anonymization, blocking or deletion | Where data is unnecessary, excessive or processed unlawfully |
| 5 | Portability | Transferring your data to another provider (in a structured format) |
| 6 | Deletion | Erasing data that is processed on the basis of consent |
| 7 | Information about sharing | Finding out with whom we have shared your data |
| 8 | Information about the consequences of refusing consent | Finding out what changes if you do not consent |
| 9 | Withdrawal of consent | Taking back consent you gave earlier, at any time |
How to exercise them
By e-mail directly to the DPO (recommended)
Send an e-mail to dpo@oodaintel.com containing:
Subject: [LGPD] (e.g. data deletion, access, portability)
Body:
- Your full name
- The e-mail address registered on the platform
- Workspace/organization (if applicable)
- Your specific request (which right you wish to exercise)
- Reasoning (optional, but it helps us process the request faster)
Through the online form
In production, this form will be replaced by an authenticated endpoint inside the dashboard that verifies your identity automatically. At the current stage, sending it opens your default e-mail client with the message pre-filled.
Deadlines and procedure
| Stage | Deadline |
|---|---|
| Acknowledgement of receipt | Immediate (auto-responder) |
| Identity check | Up to 2 business days |
| Full response | Up to 15 calendar days (Art. 19 §1 of the LGPD) |
| Justified extension | +15 days, with prior notice |
Identity verification
For your own protection, we may ask for additional verification (e.g. e-mail confirmation, a code sent to the phone number on file, MFA) before processing requests that involve changing or deleting data. This prevents a bad actor from impersonating you.
Legal limitations
In some cases we may refuse your request in whole or in part:
- Compliance with a legal obligation (e.g. data we must keep for 5 years for inspection by Brazil’s federal tax authority).
- Regular exercise of rights in judicial proceedings.
- Protection of health or the public interest.
- State security, national defence or crime prevention (where applicable).
Whenever we refuse something, we will explain the specific legal basis that justifies it.
Complaints to the ANPD
If you believe your right has been wrongly refused, or that the LGPD has been breached, you may lodge a complaint with the Brazilian National Data Protection Authority:
See also: