Brazil’s National Data Protection Authority (ANPD) has unveiled its oversight priorities for 2026–2027 and updated its 2025–2026 Regulatory Agenda, signaling an accelerated push to implement the country’s new Digital Statute for Children and Adolescents (ECA Digital) and strengthen enforcement of the General Data Protection Law (LGPD).
The documents, released on December 24 and later updated in January, outline coordinated regulatory and supervisory actions intended to provide greater transparency and predictability to the agency’s work. Notably, the ANPD is treating child and adolescent protections in the digital environment as a cross-cutting priority and linking regulatory planning to staged oversight and, eventually, sanctions.
The Priority Themes Map identifies four areas for heightened scrutiny over the next biennium: data subject rights; protection of children and adolescents online; processing of personal data by public authorities; and artificial intelligence and emerging technologies in personal data processing. The themes draw on findings from the agency’s 2023–2025 monitoring cycle and two years of incident reports, inquiries and prior supervisory actions.
Planned oversight activities include monitoring secondary uses of personal data for targeted advertising; verifying “privacy by design and by default” safeguards; and assessing measures to prevent minors from accessing inappropriate or prohibited content. ANPD notes that more complex obligations—such as age verification—will first be addressed through regulatory guidance before eventual enforcement.
On the regulatory front, the updated agenda introduces three new initiatives directly tied to ECA Digital: age verification mechanisms; obligations for suppliers of information technology products and services; and updates to the agency’s rules for monitoring and sanctions. The agenda also foresees revisions to ANPD’s internal rulemaking procedures to align with Brazil’s Regulatory Agencies Law following ANPD’s formal transition into a regulatory agency.
Other longstanding initiatives remain, including rules on data subject rights, impact assessments, biometric data, data sharing by the public sector, anonymization techniques, and governance frameworks. The ANPD emphasized that implementation timelines may adjust as ECA Digital enters force and as the federal government issues additional executive regulations.
Need Help?
If you have questions or concerns about any global guidelines, regulations and laws, don’t hesitate to reach out to BABL AI. Their Audit Experts can offer valuable insight, and ensure you’re informed and compliant.
