Brazil AI Regulatory Hub
Verification required. Claims on this page about Brazilian law were compiled on 7 October 2026 from secondary web sources and from memory of the law. No primary legal text was read, and each claim is tagged [Reported], [Recalled], [Conflict] or [Unverified] as explained on the section home page. Check the primary text before relying on any of them. This is not legal advice.
This page maps Brazilian laws, guidance and standards that bear on AI to the wiki's controls.
1. Regional model
There are three layers:
- The LGPD and the ANPD, the data protection authority [Recalled].
- Consumer and sector law.
- A pending AI bill with risk tiers, rights and supervision, which is not enforceable yet.
Use the bill for planning, and do not build your compliance to its text [Reported].
2. Instrument register
| # | Instrument | Type / status | Key points | Wiki controls | Tag | To verify |
|---|---|---|---|---|---|---|
| BR1 | PL 2338/2023 (AI bill) | Pending; Senate approved 10 Dec 2024; awaiting committee opinion in the Chamber as at 2 Sep 2026 | Topics reported: risk classification, fundamental rights, governance, civil liability, supervision, penalties. The specific tiers and fines were not verified | AI-CTRL-011, AI-CTRL-037, AI-CTRL-041 | [Reported] | Chamber text; amendments |
| BR2 | LGPD (Law 13.709/2018) | Binding | Lawful bases; rights, including review of automated decisions (Art. 20); breach notice | AI-CTRL-013, AI-CTRL-007, AI-CTRL-017, AI-CTRL-035 | [Recalled] | Article numbers; ANPD rules |
| BR3 | ANPD and sector regulators advancing AI regulation | Regulator activity | Guidance and sector rules in the absence of a statute | AI-CTRL-013, AI-CTRL-012 | [Reported] | Specific instruments |
| BR4 | Consumer Defence Code and sector rules (finance, health) | Binding | Existing duties apply to AI products | AI-CTRL-014, AI-CTRL-039 | [Recalled] | Applicability |
3. Categories, tiers and roles
| Category / role | What it means |
|---|---|
| Controller / operator | LGPD roles |
| Risk classes in the pending bill | Not yet law; use as a watchlist |
| Regulated sector entity | Sector regulator duties |
4. Timeline
| Date | Event | Tag |
|---|---|---|
| 10 Dec 2024 | Senate approves PL 2338/2023 | [Reported] |
| 2 Sep 2026 | Chamber record: awaiting committee opinion | [Reported] |
5. Mapping of common wiki controls
| Wiki control | Regional hook |
|---|---|
| AI-CTRL-013 Privacy | LGPD automated decision review (BR-T1) |
| AI-CTRL-011 Inventory | Prepare a tier mapping for the bill (BR-T2) |
| AI-CTRL-041 Fairness | LGPD non-discrimination principle [Recalled] |
| AI-CTRL-035 Incident response | LGPD breach notification [Recalled] |
6. Where the wiki covers this
The topics raised on this page are covered by the following controls, test cases and templates.
| Topic | Covered by |
|---|---|
| LGPD review of automated decisions (Art. 20) | BR-T1; TC-L03-008, TC-L03-029 |
| LGPD lawful basis, rights and breach notice | TC-L03-002, TC-L03-005, TC-L03-019 |
| Tier mapping for the pending AI bill | BR-T2; TC-L01-005; TC-L02-020 tracks regulatory change; TC-L03-037 |
7. Conflicts and cautions
- The bill's penalty amounts and tier definitions were not verified.
- The bill's text may change in the Chamber.
- A contract that refers to "Brazil's AI law" refers to an obligation that does not exist yet.
8. Verification checklist
- [ ] Chamber progress
- [ ] Senate text
- [ ] LGPD article text
- [ ] ANPD AI regulation agenda
- [ ] Sector regulator instruments
- [ ] Add the primary URL and retrieval date beside every confirmed row
9. Sources
All sources are secondary unless marked as a regulator or government page. Each fetched page was summarised by a tool and was not read line by line. A source marked "not read" appeared only as a title or snippet in search results, so do not treat it as support for any claim.
| Source | Status | Rows it relates to |
|---|---|---|
| CASRAI: Brazil AI bill PL 2338 status | Fetched and summarised (the source dates the Chamber record 2 Sep 2026) | BR1, BR2 |
| Tozzini Freire: ANPD and sector regulators advance AI regulation | Not read | BR3 |
| Barbieri Advogados: PL 2338 vs EU AI Act | Not read | BR1 content |
No primary legal text (statute, regulation or circular) was read for any row. Confirm each row against the primary source, and add its URL and retrieval date in the Brazil Regulatory Crosswalk.