President Luiz Inácio Lula da Silva (PT) signed decrees on Wednesday that introduce sweeping changes to Brazil’s Marco Civil da Internet, strengthening protections against digital crimes and expanding the responsibilities of online platforms. The measures, set to take effect upon publication in the Diário Oficial da União (DOU) on Friday, mark a significant shift in how Brazil regulates the digital space, with a particular focus on combating fraud, illegal content and online violence—especially against women and children.
The updates introduce stricter accountability for platform owners, requiring them to archive data that could be used to hold companies liable for damages in cases of legal violations. The Autoridade Nacional de Proteção de Dados (ANPD) will oversee compliance with these new rules, ensuring platforms adhere to stricter standards for content moderation and user safety.
A key provision targets the proliferation of illegal content, including terrorism-related material, child exploitation, human trafficking, self-harm promotion, and gender-based violence. Platforms will now face penalties for failing to prevent such content, particularly when it appears in paid advertisements. For non-advertised material, removal will be triggered by user notifications. The decrees also introduce a mandatory two-hour deadline for removing non-consensual intimate images—including those generated by artificial intelligence—once reported through a newly established, easily accessible user channel.
The changes also address the rising threat of AI-generated deepfakes and manipulated media, explicitly prohibiting platforms from enabling the creation or dissemination of synthetic intimate images of women without consent. This move reflects growing concerns over the misuse of emerging technologies in digital harassment and exploitation.
Why This Matters
The updates reflect Brazil’s response to a rapidly evolving digital landscape, where crimes like revenge porn, financial scams, and radicalization thrive with minimal consequences for perpetrators. By tying platform liability to data retention and swift content removal, the government aims to deter illegal activity while providing victims with stronger recourse. The inclusion of AI-generated content in these protections also signals recognition of how technology itself can be weaponized.
For users, the changes could mean faster responses to harmful content, though critics may argue the measures impose heavy compliance costs on smaller platforms. The ANPD’s oversight role will be critical in balancing enforcement with proportionality, especially as the rules apply to both domestic and international companies operating in Brazil.
What May Happen Next
Platforms are likely to begin updating their terms of service and moderation tools to align with the new requirements, though some may resist or challenge the rules in court. The ANPD could face pressure to clarify ambiguous provisions, particularly around what constitutes “reasonable” prevention efforts for paid content. Analysts expect legal disputes to emerge over the scope of data retention obligations, as companies may argue the requirements infringe on privacy or operational feasibility.
Civil society groups may push for additional protections, such as expanded whistleblower safeguards or clearer guidelines on AI-generated content. Meanwhile, the government could introduce further measures to address gaps, such as stricter penalties for repeat offenders or mandatory transparency reports from platforms on their enforcement efforts.
Frequently Asked Questions
[Question 1]
What types of content will be restricted under the new rules?
The decrees prohibit the circulation of material linked to terrorism, child exploitation, human trafficking, self-harm promotion, and violence against women. Non-consensual intimate images—including those created with AI—will also be targeted, with mandatory removal within two hours of notification.
[Question 2]
How will platforms be held accountable for illegal content?
Companies will be responsible for preventing illegal content, especially in paid advertisements. For non-advertised material, removal will follow user notifications. The ANPD will monitor compliance, and platforms may face legal consequences for failing to act.
[Question 3]
What happens if my intimate image is shared without consent?
A dedicated user channel will allow you to report such content. Platforms must remove it within two hours of notification, and the use of AI to create or disseminate these images is now explicitly prohibited.
With digital threats evolving faster than regulations, how should users balance convenience with safety when engaging online?
