Brazil's National Data Protection Authority (ANPD) has transformed into a fully-fledged regulatory agency with enhanced management and budgetary autonomy, as formalized by Decree nº 12.881/2026 and Resolution CD/ANPD nº 33. This restructuring, driven by the new Digital Statute for Children and Adolescents (ECA Digital), expands ANPD's regulatory and enforcement scope, including issuing preliminary guidance on reliable age verification mechanisms for tech providers. Companies offering digital products and services to children or those likely to be accessed by them must comply with these new obligations, with enforcement risk increasing due to the ANPD's strengthened mandate.
Effective date
2026-04-06
Action required
Companies offering digital products and services in Brazil, especially those targeting or likely accessed by children and adolescents, must review and implement reliable age verification mechanisms in compliance with ANPD's preliminary guidance from March 2026 and prepare for further regulations under the ECA Digital.
Binding status
binding
Governing body
Autoridade Nacional de Proteção de Dados
Direction
expanding scope
Innovation impact
mixed
Enforcement details
Agency
Autoridade Nacional de Proteção de Dados
Compliance requirements
Transparency requirements
- Transparency regarding reliable age verification mechanisms for services aimed at children and adolescents.
Affected industries
Affected roles
Cross-references
Cites laws
Lei Geral de Proteção de Dados Pessoais (Lei nº 13.709/2018 - LGPD), Estatuto Digital da Criança e do Adolescente (Lei nº 15.352/2026 - ECA Digital), Decreto nº 12.881/2026, Resolução CD/ANPD nº 33, Lei nº 13.853/2019
"a nova estrutura institucional combina especialização e articulação, elementos fundamentais para fortalecer a proteção de dados pessoais e ampliar a segurança de crianças e adolescentes no ambiente digital."
Enriched 2026-05-26
Stay informed
Get daily intelligence briefs on this and related regulatory developments.