Brazil

National jurisdiction · as of 2026-09-05

Brazil's age-appropriate design duties for digital services sit in Lei nº 15.211, de 17 de setembro de 2025 (the Estatuto Digital da Criança e do Adolescente, or ECA Digital), which applies to any information-technology product or service directed at children and adolescents, or likely to be accessed by them, wherever the provider is located, and enters into force on 17 March 2026.

The Estatuto da Criança e do Adolescente (ECA, Lei nº 8.069/1990), including as amended by Lei nº 14.811/2024, sets Brazil's general child-protection framework and criminalizes online exhibition or transmission of child sexual abuse material, but its own text imposes no age-verification or age-gating duty on a digital service provider; that duty arrives only with Lei nº 15.211/2025.

01

Instruments on record

Estatuto Digital da Criança e do Adolescente (ECA Digital)

In force

Lei nº 15.211, de 17 de setembro de 2025

Effective 2026-03-17 · Applies to private

Lei nº 15.211/2025 applies to any information-technology product or service directed at children or adolescents in Brazil, or likely to be accessed by them, regardless of the provider's location, development, manufacture, offer, marketing, or operation. Article 5 requires such a product or service to observe duties of prevention, protection, information, and security, adopting the child's or adolescent's best interest and integral protection as the guiding standard.

Article 11 lets the public authority act as regulator, certifier, or promoter of age-verification technical solutions.

Article 12 requires app-store and terminal operating-system providers to take proportionate, auditable, and technically secure measures to assess users' age or age range, to let parents or legal guardians configure voluntary parental-supervision mechanisms, and to make an age signal available to internet application providers through a privacy-by-design Application Programming Interface, limited to this law's purposes.

Article 14 requires the product or service provider itself, independently of the measures app stores or operating systems adopt, to implement its own mechanisms to prevent children and adolescents from accessing content unsuited to their age range. Articles 16 to 18 require parental-supervision tools, and article 18, § 2º prohibits designing, modifying, or manipulating an interface to undermine a user's autonomy or decision-making where doing so weakens those supervision tools or safeguards.

Article 35 authorizes an advertência, a simple fine of up to 10% of the economic group's revenue in Brazil in its last fiscal year, or, absent revenue, a per-registered-user fine, capped in total at R$50,000,000.00 per infraction, temporary suspension, or prohibition of activity, enforced by an independent administrative authority the law directs be created for this purpose.

The law's article 41-A entry-into-force date was set at six months after publication by Medida Provisória nº 1.319/2025 and then fixed at 17 March 2026 by Lei nº 15.352/2026, and the law has bound covered providers from that date.

Age threshold18
Verification methodsdevice signal
Enforcement bodyAn independent administrative authority for the protection of the rights of children and adolescents in the digital environment, to be created by law and regulation under article 2, X

Source: Full text of law