Brazil's LGPD applies to PJ payroll: companies must tighten data access controls

Brazil's new data protection law (Law 15,352/2026) extends LGPD obligations to payroll data of service providers (PJ), which is often stored in unsecured spreadsheets. Companies now face legal risk for inadequate access management. This marks a regulatory shift that forces operational changes in HR and finance processes.