The Brazilian Data Protection Authority (ANPD) has become an autonomous regulatory agency with expanded powers under Provisional Measure No. 1.317/2025 and Decree No. 12.622/2025. It now oversees digital protections for children and adolescents, including enforcing court orders, setting security standards, and coordinating with other agencies. The ANPD can issue regulations, supervise entities, and ensure proportional obligations for tech providers, prioritizing children’s rights and data protection in digital environments.

On 5 September 2025, the European Commission published the Draft Adequacy Decision recognizing Brazil as a country that ensures an adequate level of protection for personal data, pursuant to Article 45 of the General Data Protection Regulation (GDPR). This proposal marks the beginning of the formal procedure to authorize the transfer of personal data from the European Union to Brazil without the need for additional safeguards, effectively treating such transfers as equivalent to those occurring within the EU.

On 12 April, Justice Secretary Flavio Dino issued an ordinance that makes it possible to hold digital platforms accountable for the dissemination of content that promotes violence in schools. The document sets forth specific obligations for platforms, such as the immediate removal of certain content after a request from the competent authorities, systemic risk assessment, adoption of measures to prevent the spread of new threats to schools and a policy of active content moderation by application providers. In addition, platforms must prepare reports for the justice secretariat analyzing the risk factors of spreading certain illegal content, and whether recommendation algorithms or other algorithms used by platforms, as well as the content moderation practices adopted, contribute to such risk factors.