The Brazilian Data Protection Authority (ANPD) has become an autonomous regulatory agency with expanded powers under Provisional Measure No. 1.317/2025 and Decree No. 12.622/2025. It now oversees digital protections for children and adolescents, including enforcing court orders, setting security standards, and coordinating with other agencies. The ANPD can issue regulations, supervise entities, and ensure proportional obligations for tech providers, prioritizing children’s rights and data protection in digital environments.
Organizations domiciled in Colombia can now adopt the international standard ISO/IEC 42001:2023, which will make them among the first organizations in Latin America to have a certifiable standard for the responsible management of artificial intelligence (AI) systems.
Colombia has adopted ISO/IEC 42001:2023, becoming the first country in Latin America to implement a certifiable international standard for AI systems. This standard promotes responsible AI governance, transparency, and risk management. It aligns with Colombia’s national AI strategy and offers competitive advantages for organizations, including global recognition and regulatory compliance. The standard covers AI-specific risk assessment, operational controls, and integration with other ISO standards.
On 5 September 2025, the European Commission published the Draft Adequacy Decision recognizing Brazil as a country that ensures an adequate level of protection for personal data, pursuant to Article 45 of the General Data Protection Regulation (GDPR). This proposal marks the beginning of the formal procedure to authorize the transfer of personal data from the European Union to Brazil without the need for additional safeguards, effectively treating such transfers as equivalent to those occurring within the EU.
On 13 August 2025, Mexico’s Ministry of Economy launched an anti-dumping investigation into adult bicycle imports from China, citing price discrimination from 2022–2024. Five Mexican companies filed the petition, and 261 importers/exporters are named. The probe may lead to countervailing duties if injury to domestic producers is confirmed. Interested parties must submit evidence by 23 September 2025, with possible extensions.
Colombia’s Law 2502 of 2025 adds an aggravating factor to identity theft committed using AI, increasing penalties and formally recognizing deepfakes. It mandates traceability systems and coordinated public policy to address AI-related crimes. The law also strengthens biometric data protections, requiring explicit consent and strict processing safeguards. Implementation begins July 2026, reflecting Colombia’s commitment to digital ethics and cybersecurity.
On 3 June 2025, SECEX (the Brazilian Secretariat of International Trade) initiated an antidumping investigation on the Brazilian imports of hot-rolled flat steel from China, commonly classified under certain NCM codes.The investigation may result in the imposition of antidumping measures and the consequent increase in the cost of Brazilian imports of flat-rolled hot-rolled flat laminates for a period of five years.
The National Superintendence of Securities (SUNAVAL) issued Administrative Ruling No. 251 on 27 March 2025, amending the Rules Regarding the Administration and Control of Risks Related to the Crimes of Money Laundering, Financing of Terrorism, Financing of the Proliferation of Weapons of Mass Destruction and Other Illicit Activities, Applicable to Entities Obligated by the National Superintendence of Securities. The Ruling establishes the parameters that entities acting in the securities market should follow and includes a new regulatory regime for money laundering, financing of terrorism, financing of the proliferation of weapons of mass destruction and other illicit activities. The Ruling became effective on 27 March 2025.
On 16 April 2025, the decrees enacting the Law of Acquisitions, Leases and Services of the Public Sector and amending the Law of Public Works and Related Services, both proposed by the Federal Executive Branch, were published in the Federal Official Gazette (DOF).
On 20 March 2025, the decree enacting the General Law of Transparency and Access to Public Information, the General Law for the Protection of Personal Data in Possession of Obligated Entities, the Federal Law for the Protection of Personal Data in Possession of Private Parties, and the amendment to Article 37, Section XV, of the Organic Law of the Federal Public Administration was published in the Official Gazette of the Federation.