Brazil Tightens ANPD Oversight

Decrees No. 12.975/2026 and No. 12.976/2026, signed on May 20, 2026 and set to take effect after 60 days, expand the duties of digital platforms in Brazil to combat crimes, fraud, and violence against women online. The new rules add requirements for prevention, transparency, victim support, and cooperation with authorities, in a framework that was already showing tighter control over the digital ecosystem.

ANPD grows more active and better resourced

That regulatory shift is unfolding alongside an ANPD with greater capacity to act. An analysis published in July 2026 said the agency’s institutional strengthening is reflected in more complaints, more inspections, and a firmer regulatory posture. In the same vein, O Tempo reported on July 27, 2026 that the ANPD continued to reinforce its internal structure with new hires, in step with its institutional expansion.

The broader reading is that the authority has begun operating more like a full-fledged regulator, with more tools to inspect and a heavier workload to sustain that pace. A Jornal do Brasil analysis described the process as the end of a culture of improvisation in compliance.

More obligations for platforms and sensitive sectors

The new requirements for platforms come on top of a broader Brazilian regulatory agenda that has been expanding compliance duties for digital actors and critical sectors. The materials available also point to Resolution No. 32 on transfers to the EU, the ECA Digital, and the technical and guidance documents published by the ANPD on its official portal, all part of the regulatory framework now surrounding companies that process personal data in Brazil.

In that setup, platforms face a stricter framework not only because of the content they must prevent and handle, but also because they have to demonstrate traceability, response, and cooperation with authorities. A Sampi report on the Marco Civil da Internet sums up that shift by noting that the new rules expand concrete duties in moderating and managing incidents tied to crimes and online violence.

A publication from the Ministry of Women, meanwhile, said the decree setting guidelines for protecting women online is already in force, confirming that the regulatory package has already started producing practical effects for companies that mediate digital services.

Institutional expansion and enforcement

The shift is not limited to new substantive obligations. The ANPD is also consolidating operational capacity, something the July analysis said is being accompanied by more complaints and inspections. The hiring reported by O Tempo reinforces that signal of internal expansion at a time when oversight is becoming more intense.

At the same time, the authority continues to gain presence in the regional and international regulatory ecosystem. Among the available sources, it is also noted that the ANPD was the first in South America to join an international network of digital security agencies, another sign of broader institutional reach.