Brazil. Children's privacy. Law

ECA DigitalDigital Statute of Children and Adolescents, Law No. 15,211/2025 (ECA Digital)

In force

§1Summary

Synopsis

Online child-safety law for digital products and services directed at or likely to be accessed by minors in Brazil. It requires reliable age assurance, parental tools, protective defaults, a ban on profiling minors for ads and impact assessments.

Key themes
  • age verification
  • parental supervision
  • privacy by default
  • ad profiling ban
  • dark patterns
  • child rights impact assessment
  • transparency reports
Unique features

Self-declaration of age is not sufficient; accounts of under-16s must be linked to a guardian; foreign providers must appoint a Brazilian legal representative.

SaaS relevance

Consumer SaaS, apps, games, marketplaces and edtech likely to be accessed by minors in Brazil are caught, including foreign providers.

§2Obligations

Extraterritorial
Yes
Cross-border transfers
Legal representative in Brazil for foreign providers
Maximum penalty
Up to 10% of Brazilian group revenue, capped at BRL 50m per infraction; suspension/prohibition

§3Dates

Key dates
  • Adopted
  • In force
  • Implementing decrees published 2026-03-18; ANPD sanctions planned from Nov 2026, formal enforcement from Jan 2027

§4Text and authority

Text
Authority
Agência Nacional de Proteção de Dados (ANPD)

§5Where it applies

Domestic law of
Brazil

§6Sources and verification

Verification

High confidence.

Sanction date (17 Sept 2025) from general knowledge.