It is impossible for the Third Sector to work efficiently without collecting people's data and that is why this segment is one of those heavily affected by Law 13,709/18, the LGPD. This legislation determines several obligations for any type of legal entity that collects and/or uses data from individuals. Any NGO/CSO that collects data from its beneficiaries with the intention of using it to evaluate and take steps to positively change something is defined by legislation as “controlling”.