Brazil ANPD expands oversight of platforms

Update August 20, 2026: Decrees No. 12,975/2026 and No. 12,976/2026 have been in force since July 20, 2026, after a 60-day transition period for companies. The new framework expanded platform obligations for prevention, transparency, victim support and cooperation with authorities, under tighter oversight by the ANPD.

New rules for platforms in Brazil

Decrees 12,975 and 12,976 took effect in Brazil on July 20, 2026, after a 60-day compliance period for companies, and expanded obligations for digital platforms. With that change, the ANPD was formally assigned to oversee much of the compliance effort, according to official documentation published on gov.br.

The same documentation identifies the ANPD as the authority responsible for regulating, auditing and investigating possible violations tied to the digital environment under the new rules. That material also includes Technical Note No. 1/2026/FIS/CGF/ANPD on the Grok artificial intelligence system and possible violations of the LGPD.

What changed for digital platforms?

Platforms that host third-party content now face broader duties on prevention, transparency, victim support and cooperation with authorities. The new framework also made ANPD oversight over those obligations more explicit, according to official political coverage and documentation available on gov.br.

This does not replace what had already been reported about the ANPD’s role, but it does clarify that the rules took effect after a 60-day adaptation period for companies. The regulatory debate was later reflected in follow-up analysis.

How was enforcement of the rules discussed?

The regulatory debate was reflected in later analysis. Desinformante said some of the new obligations will have to be further regulated by the ANPD itself, which is adding enforcement, monitoring and regulatory functions over platforms, in line with powers already granted by the Digital Statute for Children and Adolescents, established by Law 15.211/2025.

Contee.org.br said that, under the new framework, platforms hosting third-party content now have specific duties tied to prevention, transparency and responses to complaints. It also said enforcement of those obligations falls to the ANPD, strengthening its role as the supervising authority.

Gazeta do Povo also reported that, under the STF decision and the new regulation, platforms become legally responsible for user-posted content once it has been reported by any person. The outlet added that Justice Alexandre de Moraes will handle challenges to Decrees 12,975 and 12,976 over an alleged censorship risk and possible negative impact on startups.

What other signals accompanied the entry into force?

CGI.br published a note on the decrees and set out its position in the regulatory debate. The committee added internet governance context for Brazil and pointed to concerns about balancing the fight against unlawful content with the protection of online rights.

The ANPD also released a Technology Radar on deepfakes, explicitly linked to the new oversight and enforcement functions assigned to it by the decrees. The study shows the authority is preparing to monitor risks associated with synthetic content and its impact on privacy and digital security.