Brazil advances LGPD changes in Congress

Brazil’s Congress and regulators are moving on personal data, artificial intelligence and digital markets at the same time. In the Chamber of Deputies, PL 3278/26 would amend the LGPD to require platforms and other high-data-volume services to display a clear summary of their privacy policies. At the same time, the Senate is still working on bills covering AI and data use, while the ANPD and the Ministry of Justice push forward with rules for the ECA Digital.

What does PL 3278/26 change for platforms?

PL 3278/26 would require an essential information sheet, written in clear and accessible language, about privacy policies and data use. According to coverage cited by MixVale, the text also adds requirements for trackers, with users able to accept or reject each category separately and with preselected consent options prohibited.

The bill is being reviewed in the Chamber of Deputies under conclusive procedure. It is moving through the committees on Communications and on Constitution and Justice and Citizenship, without the need for a floor vote unless there is an appeal. If it advances there, it would still need to go to the Senate before any possible presidential approval.

What other bills are still active in Congress?

PL 1356/2026 revives the text introduced in 2023 as PLP 234 and creates the so-called General Data Empowerment Law. The measure, introduced by Arlindo Chinaglia, seeks to treat data ownership as a form of property belonging to the data subject, with rights of use assigned through revocable consent, an intransferable data identity, and participation by the data subject in the economic results generated from the use of that data.

In the Senate, PL 2234/2022 was still ready for floor debate in July 2025, but it was removed from the agenda on July 8, 2025 and continued under the ordinary process. Later, on December 18, 2025, the urgency request for the matter was rejected, so it remained on the regular track.

Also in the upper chamber, PL 2470/2026 was before the Committee on Science, Technology, Innovation, Communications and Information Technology on August 11, 2026, according to the official legislative activity system.

How is the AI and digital markets agenda moving?

The AI debate remains open, but signs point to delays. ABRANET said the legal framework for artificial intelligence would be voted on in 2026, though only after the elections, which reflects business expectations that the process will take longer.

Along the same regulatory line, the Ministry of Justice and Public Security and the ANPD held a webinar to discuss rules for the ECA Digital and the Marco Civil, with a focus on protecting children and adolescents online and on platform responsibility. The ANPD also fined ByteDance, TikTok’s parent company, R$ 153.7 million for irregularities in the handling of data belonging to children and adolescents.

Outside the child-protection focus, Data Privacy Brasil backed PL 4675/2025, which amends competition law to create a new regulatory model for digital markets. The group said the measure has implications for privacy and personal data protection in digital environments.

What is happening with the validity of some measures?

The National Congress portal listed MPV 1319/2025 as fully revoked by a later law, so its validity was no longer active at the time of the record. The extract itself describes it as revoked, so the information should be read with caution.

Taken together, Brazil’s legislative picture shows a fragmented but active agenda, with bills touching the LGPD, AI, digital competition, the ECA Digital and personal data oversight across different agencies and stages of review.