New digital security rules for major technology companies come into force in Brazil

Two new decrees signed by Brazilian President Luiz Inácio Lula da Silva, covering major technology companies, have come into force to re-regulate security rules in the digital environment. Decrees numbered 12.975 and 12.976 amend the Internet Civil Framework and impose new responsibilities on platforms. The implementation and monitoring of the new rules will be carried out by the National Data Protection Authority (ANPD).

Under the new regulations, major technology companies are required to have a physical headquarters and a legal representative in Brazil. Companies will be obliged to prevent the mass dissemination of criminal content, such as terrorism, the sexual exploitation of children, and violence against women. Additionally, companies must keep advertising records, including paid advertisements and promotions, for one year.

The second decree focuses on the prevention and combat of violence against women in the digital environment. The regulation provides protection against gender-based political violence, the sharing of private images without consent, cyber harassment, and the spread of deepfake content. Platforms may be held liable for systematic failure if they do not take the necessary measures in the face of such situations.