[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

3 clusters · 12 sources · 30 days · First seen · Last updated

Brazil ANPD regulatory and AI oversight expansion

Overview

Brazil’s National Data Protection Authority (ANPD) is expanding its regulatory capacity and oversight. Initially, the agency established an internal artificial intelligence center to develop expertise in analyzing complex systems, such as generative AI and automated decision-making, while monitoring risks like the unauthorized creation of sexualized images.

Following the transformation of the ANPD into a regulatory agency with administrative and financial autonomy under Law No. 15,352, the authority has increased its enforcement activities, including opening 19 administrative sanctioning processes in a single month. The agency has identified the use of artificial intelligence and emerging technologies as priorities for its 2026-2027 inspection biennial.

A significant compliance gap has been noted regarding the processing of service provider (PJ) payroll data. While employee data is typically managed through secure systems, many companies continue to process PJ remuneration via insecure methods like spreadsheets, emails, and messaging apps. This poses risks under the General Data Protection Law (LGPD), as these documents often contain sensitive information such as tax IDs (CPF), bank details, and compensation data. Contracting companies are obligated to maintain the same security and access controls for PJ data as they do for regular employees.

Furthermore, the ANPD is intensifying enforcement of ‘privacy by design’ requirements, emphasizing that data protection must be integrated into the initial architecture of products and services. Through Resolution CD/ANPD nº 30/2025, the agency published a Priority Themes Map for the 2026-2027 biennium, outlining inspections focused on the rights of data subjects regarding biometric, health, and financial data, the protection of children and adolescents in digital environments, and oversight of the public sector.

Entities

ANPD · Brazil · National Secretariat for Digital Rights · National Data Protection Authority · Autoridade Nacional de Proteção de Dados

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. [TECHNOLOGY] 5 sources
    ANPD reinforces privacy by design requirements under Brazil's LGPD

    Brazil's ANPD has released a 2026-2027 inspection roadmap, emphasizing ‘privacy by design’ and targeting biometric, health, financial, and children's data protection.

  2. [BUSINESS] 5 sources
    ANPD regulatory changes increase data privacy risks for PJ payroll

    Brazil's ANPD is increasing oversight of data privacy, specifically targeting the insecure handling of service provider (PJ) payroll information via spreadsheets and email.

  3. [TECHNOLOGY] 3 sources
    Brazil's ANPD establishes AI center to strengthen technological oversight

    Brazil's ANPD is launching an internal AI center to bolster technical oversight, while government officials advocate for risk-based regulatory frameworks to balance AI innovation with data protection.

Sources

capitaldigital.com.br · dicaappdodia.com · eldogomes.com.br · laboyanos.com · livecoins.com.br · mobile.valor.com.br · oglobo.globo.com · portal.comunique-se.com.br · privacytools.com.br · revistaempreende.com.br · techware.com.br · terra.com.br

This summary has been updated 1 time: see revision history