Skip to content
Jurisdiction · 3 regulations

Brazil: data, AI and cyber laws

3 regulations in Brazil that affect companies handling data: Brazil AI Bill (PL 2338/2023), Brazil ECA Digital, Brazil LGPD. Part of Americas.

Past deadlines

March 20261 deadline

  1. ECA Digital in force

    Art. 41-A (as set by Law 15.352/2026, following MP 1.319/2025) fixes entry into force on 17 March 2026.

    Takes effect6 months agoSource

August 20251 deadline

  1. Deadline to adopt ANPD standard contractual clauses

    Agents relying on contractual clauses for international transfers must incorporate the ANPD-approved SCCs into their contracts within 12 months of publication.

    Compliance deadline13 months agoSource

December 20241 deadline

  1. Approved by the Federal Senate

    Senate approves the consolidated text and sends it to the Chamber of Deputies.

    Takes effect21 months agoSource

August 20241 deadline

  1. International transfer regulation published

    Resolution CD/ANPD 19/2024 on international transfers and standard contractual clauses published and in force.

    Takes effect2.1 years agoSource

August 20211 deadline

  1. ANPD sanctions enforceable

    Administrative sanctions (Arts. 52-54) become applicable per Law 14.010/2020.

    Enforcement5.1 years agoSource

September 20201 deadline

  1. LGPD in force

    Main LGPD provisions take effect.

    Takes effect6 years agoSource

When the rules change: new data, privacy and AI laws and deadlines, the next morning.