Brazil has outlined possible penalties for companies that violate its General Law for the Protection of Personal Data (LGPD), unleashing a wave of work for Brazilian lawyers.