Skip to content
Cyber Compliance

HIPAA → LGPD crosswalk

A control-by-control mapping between HIPAA Security Rule (45 CFR Part 164, Subpart C) and Lei Geral de Proteção de Dados (Brazil, Lei 13.709/2018). 4 mappings.

HIPAALGPDRelationshipNotes
§164.308(a)(1)
Security management process
Art. 46
Security measures
RelatedCurated
Évaluation et gestion des risques
§164.308(a)(6)
Security incident procedures
Art. 48
Communication of a security incident
RelatedCurated
Réponse aux incidents et notification des violations
§164.312(e)(1)
Transmission security
Art. 46
Security measures
PartialCurated
Cryptographie et protection des données
§164.404
Notification to individuals
Art. 48
Communication of a security incident
RelatedCurated
Réponse aux incidents et notification des violations

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.