Brazil sets transparency reporting rules for platforms accessed by children
Brazil’s National Data Protection Authority has established reporting deadlines and disclosure requirements for digital platforms with more than 1 million registered users under 18, under the Digital Statute of Children and Adolescents.
Brazil’s National Data Protection Authority (ANPD) adopted Decisional Order CD/ANPD No. 122/2026 on 11 August 2026, establishing requirements for transparency reports from digital platforms aimed at, or likely to be accessed by, children and adolescents.
The rules apply to internet application providers with more than 1 million registered users under 18 in Brazil. Under Article 31 of the Digital Statute of Children and Adolescents (ECA Digital), these providers must publish their first semi-annual transparency report by 17 September 2026.
The first report must generally cover the period from 1 January to 30 June 2026. Platforms that do not have systematised data for January and February may instead report on the period from 17 March to 30 June 2026.
The reports must disclose information on complaint and investigation channels, notifications received and actions taken, content and account moderation, measures to identify illegal activity and children’s accounts on social media, and steps to improve the protection of children’s and adolescents’ data and privacy. They must also include information on measures used to verify parental consent.
Platforms are additionally required to describe their methodologies and report the results of impact assessments and risk management measures addressing the safety and wellbeing of children and adolescents.
From the second reporting cycle, reports will follow standard six-month periods. The second report will be due by 1 February 2027, while first-semester reports will subsequently be due by 1 August each year.
