Brazil regulates children’s internet access

Update August 25, 2026: Brazil has already enacted Law No. 15.211/2025, and the ECA Digital implementing decrees took effect on March 17, 2026. The rule is no longer just a debate about social media, but a broad framework that covers several digital services and allows fines of up to 50 million reais.

Brazil has put the ECA Digital into force, a framework that requires digital platforms and services to verify users’ ages, build safety in by default, and quickly remove child abuse content. The law covers social networks, games, streaming services, app stores and other services accessible to minors, with fines and possible operational restrictions for companies that fail to comply.

What changed now that the law is in force?

Law No. 15.211/2025 was enacted in September 2025, and its implementing decrees began to apply on March 17, 2026, according to Planalto. Since then, the ECA Digital has moved from a proposal centered on social networks to an operational regime with compliance rules for digital services used by children and teenagers.

The original version of the debate, which at one point proposed banning users under 16 from social networks, was absorbed into a broader regulatory structure. The federal government presented the measure as a new child protection framework for the online environment, requiring reliable age verification systems to replace self-declaration.

What services does it cover?

The ECA Digital is not limited to social networks. It applies to a broad range of digital services that are likely to be accessed by minors in Brazil, even if the companies are based outside the country. Covered services include video games, streaming platforms, app stores, operating systems and other digital services, according to the Ministry of Justice and Public Security.

G1 also reported that the new rules require age-verification and child-protection mechanisms on gaming platforms, streaming services and app stores operating in Brazil. Veja, meanwhile, said providers now have an active legal duty to protect minors from online threats and restrict their access to inappropriate content.

Who oversees compliance?

Enforcement is handled by the National Data Protection Authority, which can issue warnings, fines and, in serious cases, request a suspension of activities, according to Fundação Abrinq. Brazil’s Senate said the penalty scheme includes a warning with up to 30 days to fix violations before moving to harsher penalties.

What penalties does it set out?

Companies that fail to comply can face fines of up to 10% of a corporate group’s revenue in Brazil, or, if they have no revenue in the country, fines ranging from 10 to 1,000 reais per registered user, capped at 50 million reais per violation, according to the Senate and Estratégia OAB. AP News also reported that penalties can reach 50 million reais.

The regulatory range also includes temporary suspension and even a ban on operating. G1 added that platforms that cannot show effective efforts to protect children and adolescents may be subject to suspension or prohibited from operating in Brazil.

What does it require in design and moderation?

The decrees regulating the ECA Digital require safety to be built into platform design, with reliable age-verification mechanisms by default, family supervision tools, specific rules for privacy, data handling and advertising aimed at children and teenagers, as well as a rapid response to improper content, according to the Ministry of Education.

The Brazilian government also said the regulation requires self-declaration to be replaced by reliable age-verification systems, illegal content to be removed quickly, and default safety settings for children’s accounts. Local coverage reinforces that approach, describing an active protection duty rather than a merely formal one.

What happens with illegal content?

The ECA Digital orders the immediate removal of content related to child sexual abuse or exploitation and requires mandatory notification of the competent authorities in Brazil and in other countries involved, according to the Senate. The response to that type of material is no longer optional and now sits at the core of the legal obligation.

What happened to the privacy debate?

The debate over privacy and digital exclusion remains open. During the early stages of the discussion, DPL News reported warnings from platforms about the risks of banning users under 16 from social networks, while Instagram pointed to the technical challenge of verifying identity without adding friction.

El Surtidor had warned that finding the right way to protect children online is not simple. That tension is still there, although the debate has now shifted from whether to impose a single ban to how age checks, default safety settings and effective moderation should work across very different digital services.

How does Brazil compare with other countries?

Brazil is now aligned with a broader regulatory wave. Semana placed the country among a group of nations that restrict, or are discussing strong restrictions on, minors’ access to social networks, alongside countries such as Australia, France and Spain.

Against that backdrop, Brazil is no longer being discussed as an isolated proposal. It is part of a wider response that combines usage limits, age verification, design obligations and escalating sanctions for platforms operating in the country.