enforcement action BR enforcement 9/10
Government · Autoridade Nacional de Proteção de Dados (Brazil)

Brazilian federal agencies, including the National Data Protection Authority (ANPD), Federal Public Ministry (MPF), and National Consumer Secretariat (Senacon), issued joint recommendations to X (formerly Twitter). The recommendations require X to immediately prevent its AI tool, Grok, from generating non-consensual sexualized or eroticized synthetic content, particularly involving minors or identifiable adults. X must also establish procedures within 30 days to identify and remove existing illicit content, suspend involved accounts, provide a transparent complaint mechanism, and conduct a Data Protection Impact Assessment for Grok's generative features. Non-compliance could lead to further administrative and judicial action.

Action required

Companies operating generative AI models, especially those allowing user-generated content, must implement robust controls to prevent the creation of illegal or harmful synthetic media, particularly non-consensual sexualized content involving minors or adults. This includes immediate technical measures, content moderation procedures, a transparent complaint system, and a Data Protection Impact Assessment (DPIA).

Binding status

advisory

Governing body

Autoridade Nacional de Proteção de Dados, Ministério Público Federal, Secretaria Nacional do Consumidor

Direction

restrictive

Innovation impact

constraining

Enforcement details

Agency

ANPD, MPF, Senacon

Compliance requirements

Required disclosures

  • Implementation of a transparent, accessible, and effective mechanism for data subjects to exercise their rights, including sending complaints about irregular, abusive, or illegal use of personal data, especially in cases of creation of non-consensual sexualized or eroticized synthetic content, ensuring an adequate and reasonable response.

Prohibited practices

  • Generation of new synthetic images, videos, or audio representing children and adolescents in sexualized or eroticized contexts.
  • Generation of new synthetic images, videos, or audio representing identified or identifiable adult natural persons in sexualized or eroticized contexts without their authorization.

Transparency requirements

  • Implementation of a transparent, accessible, and effective mechanism for data subjects to exercise their rights and submit complaints about irregular, abusive, or illegal use of personal data, especially for non-consensual sexualized/eroticized synthetic content.

AI technologies

deepfakesgenerative aiai agents

Affected industries

technologymedia entertainment

Affected roles

cisoctogeneral counselcompliance officerproduct managerrisk managerprivacy officer

Linked intelligence briefs

Brazil Agencies Recommend Immediate Action Against AI-Generated Sexualized Content on X/Grok

Brazil's National Data Protection Authority (ANPD), Federal Public Ministry (MPF), and National Consumer Secretariat (Senacon) issued joint recommendations to the X platform regarding the Grok AI tool [1]. The recommendations address the generation of non-consensual sexualized deepfakes of real individuals, including minors, and call for immediate preventive measures [2]. The actions seek to address violations of data protection, consumer rights, and human dignity [1].

"Entre as recomendações conjuntas expedidas pela ANPD, pelo MPF e pela Senacon, está a de que sejam implementadas, de forma imediata, medidas destinadas a impedir que o Grok gere novas imagens, novos vídeos ou novos arquivos de áudio que representem crianças e adolescentes em contextos sexualizados ou erotizados, ou que representem pessoas naturais maiores de idade identificadas ou identificáveis, em contextos sexualizados ou erotizados, sem sua autorização."

Enriched 2026-05-09

Stay informed

Get daily intelligence briefs on this and related regulatory developments.

Start 14-day trial