Brazil, Ecuador Advance AI, Cybersecurity Laws

Brazil moves ahead with its cybersecurity framework

Brazil’s Bill 4,752/2025 for a Cybersecurity Legal Framework was approved by the Senate’s Constitution and Justice Committee (CCJ) and, as of July 8, 2026, was still under review by the Committee on Science, Technology, Innovation and Informatics (CCT), under rapporteur Senator Hermes Klann. According to BrCooperativo, Klann called a public hearing on June 30, 2026, to review the proposal, with a focus on its impact on cooperatives and with testimony from the ANPD, the Central Bank and specialists.

The debate is also centered on interoperability with sector-specific regulations, especially Central Bank rules on Pix and payments. According to BrCooperativo, the bill also seeks to push financial cooperatives to adopt digital security governance models aligned with the National Digital Security and Resilience Program and the anti-fraud requirements of BC Protege+ and the BCB sanctioning regime.

Ecuador sets limits on AI in the courts

Ecuador has introduced a bill to regulate the use of artificial intelligence in the justice system, with limits and penalties. The proposal states that AI can only operate as a support tool and can never replace legal reasoning or the decision-making of justice officials.

The text allows uses such as case law research, case classification, document organization and the processing of large volumes of information. It excludes core functions such as evidence assessment, interpretation of legal norms, the drafting of decisions and the issuance of judicial rulings, which remain reserved for judges and courts.

The bill also requires these tools to comply with principles of transparency, reliability and human oversight, while preserving judicial independence and the legal certainty of proceedings.

More initiatives across the region

Elsewhere in the region, the research material points to other regulatory moves in Latin America. In Chile, the available information points to the rollout of the 2026 personal data law and a guide on cybersecurity for state agencies and critical information infrastructure. In El Salvador, there is a new Cybersecurity and Information Security Law, while in Mendoza, a provincial law stands out for adding obligations and penalties to help shield the province from cyberattacks.

Uruguay also appears in the material, where a law aimed at stopping the spread of sexual deepfakes was delayed after a complaint from internet companies. Taken together, the initiatives outline a regional map with stronger compliance demands for both the public and private sectors, along with sanction regimes that are gaining weight across different jurisdictions.