Brazil ANPD takes over digital oversight

August 20, 2026 update: with Decrees No. 12.975/2026 and No. 12.976/2026 now in force, Brazil’s ANPD has moved into a central role in digital oversight. The agency can now regulate and audit compliance with the new platform obligations, as well as investigate possible violations under the LGPD and the Marco Civil da Internet.

Decrees No. 12.975/2026 and No. 12.976/2026, signed on May 20, 2026 and given 60 days to take effect, expanded the obligations of digital platforms in Brazil to combat crimes, fraud, and online violence against women. The new rules add requirements around prevention, transparency, victim support, and cooperation with authorities, in a regulatory environment that had already been tightening its grip on the digital ecosystem.

What changed with the new decrees?

With Decrees No. 12.975/2026 and No. 12.976/2026 now in force, the ANPD is at the center of digital oversight in Brazil, with authority to regulate and audit compliance with the new platform obligations and to investigate possible violations tied to the digital environment under the LGPD and the Marco Civil da Internet, according to VLO Law Firm.

That regulatory shift comes alongside an ANPD with greater operational capacity. An analysis published in July 2026 said the agency’s institutional strengthening is reflected in more complaints, inspections, and a more assertive regulatory stance. In the same vein, O Tempo reported on July 27, 2026, that the ANPD continued expanding its internal structure with new hires, in line with its institutional growth.

The broader picture is that the authority is now operating more like a full-fledged regulator, with more tools to enforce compliance and more work to sustain that pace. A Jornal do Brasil analysis described that process as the end of a culture of improvisation in compliance matters.

What new obligations do platforms have?

Platforms must adopt measures for prevention, transparency, victim support, and cooperation with authorities in response to crimes, fraud, and online violence against women. The Ministry of Women said the decree setting guidelines to protect women online is already in force, confirming that the package of rules has already started to have practical effects on companies that mediate digital services.

The new platform requirements come on top of a Brazilian regulatory agenda that has been expanding compliance duties for digital actors and critical sectors. The available material also points to Resolution No. 32 on transfers to the EU, the Digital ECA, and the technical and guidance documents published by the ANPD on its official portal, all part of the regulatory framework now surrounding companies that process personal data in Brazil.

In that setup, platforms face a tougher framework not only because of the type of content they must prevent and respond to, but also because of the need to show traceability, responsiveness, and cooperation with authorities. A Sampi note on the Marco Civil da Internet sums up that shift by saying the new rules expand specific duties in moderating and handling incidents linked to crimes and online violence.

How is the ANPD being strengthened?

The ANPD is expanding its operational capacity through more complaints, inspections, and hiring, signaling institutional consolidation. The July analysis cited in the story describes that process as an evolution toward a firmer regulatory posture, while O Tempo reported new additions to reinforce its internal structure.

The move is not limited to new substantive obligations. The ANPD is also building out its operational capacity, something the July analysis said is being accompanied by more complaints and inspections. The hiring reported by O Tempo reinforces that signal of internal expansion at a time when oversight is becoming more intense.

At the same time, the agency continues to build a presence in the regional and international regulatory ecosystem. Among the available sources is also the fact that the ANPD was the first in South America to join an international network of agencies focused on digital security, another sign of a broader institutional footprint.