Skip to content
cccskills
FreePublished on GitHub

saas-lgpd-international-transfer

Set up international data transfers per LGPD Arts. 33-36 and Resolução CD/ANPD nº 19/2024 (Cláusulas-Padrão Contratuais brasileiras). Use when user asks 'transferência internacional', 'AWS US LGPD', 'cláusulas-padrão', 'SCCs Brasil', 'data residency', or onboarding any operator outside Brazil. Outputs per-vendor transfer assessment in `.lgpd/transfers/`.

The English summary is being prepared. Showing the original description.

Works withAWS

Run score Not tested

See how to install

Files included (1)

  • SKILL.md3.4 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Transferência Internacional de Dados

Interaction Localization Rule: When locale: pt-BR (or user speaks Portuguese), ALL questions (AskUserQuestion / sk_question), confirmation prompts, and selectable options MUST be translated and presented in Brazilian Portuguese (PT-BR). Any English question text or options in this skill are illustrative examples — NEVER display English questions or options to a Portuguese developer. Internal reasoning, code synthesis, tests, and technical documentation MUST remain in English (except Brazilian statutory compliance documents under .lgpd/).

Arts. 33-36 LGPD + Resolução CD/ANPD nº 19/2024 (Cláusulas-Padrão Contratuais brasileiras).

Hipóteses do Art. 33 (9 bases)

I. País com nível de proteção adequado (ANPD ainda não publicou lista oficial) II. Garantias contratuais: (a) cláusulas contratuais específicas (b) cláusulas-padrão ← caminho mais usado, regulado pela Res. 19/2024 (c) normas corporativas globais (BCRs) (d) selos/certificados/códigos de conduta III. Cooperação jurídica internacional IV. Proteção da vida V. Autorização específica da ANPD VI. Acordo de cooperação internacional VII. Execução de política pública VIII. Consentimento específico e destacado do titular IX. Cumprimento de obrigação legal, contrato, etc.

Cláusulas-Padrão (Res. 19/2024 Anexo II)

  • Devem ser adotadas integralmente, sem alteração, exceto preenchimento de identificação
  • Prazo de adoção em contratos: 12 meses (encerrou ago/2025) — atualmente obrigatório
  • Estrutura: identificação, finalidades, transferências posteriores, responsabilidades, princípios, direitos do titular, medidas técnicas, lei aplicável, encerramento

Workflow

  1. Listar todos os operadores fora do Brasil (cloud US, observability, comms, etc.)
  2. Para cada um, escolher hipótese do Art. 33
  3. Implementar:
    • Se IIb (mais comum): assinar adendo com Cláusulas-Padrão do Anexo II
    • Se VIII: capturar consentimento específico (raro na prática)
  4. Documentar em .lgpd/transfers/{vendor}.md
  5. Citar na política de privacidade

Template — .lgpd/transfers/{vendor}.md

# Transferência Internacional — {Vendor}

- **Operador**: {nome}
- **País**: {país}
- **Finalidade**: {específica}
- **Dados transferidos**: {lista}
- **Hipótese do Art. 33**: II, (b) cláusulas-padrão
- **Cláusulas-Padrão (Res. 19/2024)**: assinadas em {data}
- **Documento**: link para PDF assinado
- **Sub-operadores autorizados**: {lista}
- **Salvaguardas adicionais**: criptografia em trânsito e em repouso, pseudonimização
- **Avaliação de adequação**: {data} — risco residual {nível}
- **Próxima revisão**: {data}

Status update

## F14b — Transferências internacionais ✓
- {N} operadores fora do BR
- {M} com cláusulas-padrão assinadas
- {X} pendentes: {lista}
- Próximo: saas-lgpd-vendor-audit (review anual)

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Turn your AI session into an autonomous SaaS and software engineering studio with 49 specialized agents, 74 workflow skills (/saas-*), 28 director gates, and complete architecture across Next.js, FastAPI, Supabase, Tailwind, and Stripe.

The English summary is being prepared. Showing the original description.

Basinfy/Basinfy-SaaS-Studio3Updated Oct 24, 2026

Brownfield audit — do existing artifacts actually work? Numbered migration plan. Unlike /saas-project-stage-detect, checks compliance not existence.

The English summary is being prepared. Showing the original description.

Basinfy/Basinfy-SaaS-Studio3Updated Oct 24, 2026

Create an ADR documenting a technical decision: context, alternatives considered, consequences.

The English summary is being prepared. Showing the original description.

Basinfy/Basinfy-SaaS-Studio3Updated Oct 24, 2026

Traceability matrix mapping PRD requirements to ADRs. Finds gaps, cross-ADR conflicts, stack compatibility. PASS/CONCERNS/NOT ASSESSED/FAIL.

The English summary is being prepared. Showing the original description.

Basinfy/Basinfy-SaaS-Studio3Updated Oct 24, 2026

Audit assets against naming conventions, file size budgets, format standards. Finds orphaned assets, missing references.

The English summary is being prepared. Showing the original description.

Basinfy/Basinfy-SaaS-Studio3Updated Oct 24, 2026

Author per-asset visual specs, SVG dimensions, and generation prompts from PRDs and design tokens. After design tokens.

The English summary is being prepared. Showing the original description.

Basinfy/Basinfy-SaaS-Studio3Updated Oct 24, 2026

See all skills by Basinfy

Report a problem with this skill