Brazil Empowers Data Agency to Enforce Big Tech Platform Liability
Brazil's president signed decrees empowering the national data agency to enforce platform liability for illegal content.
Why it matters: Legal teams advising tech companies in Latin America must navigate stricter platform liability and compliance rules. Brazil’s new enforcement regime signals growing regulatory alignment with the EU, impacting how global platforms manage content and user data.
- On May 20, 2026, President Lula signed two decrees targeting big tech accountability for illegal content.
- The decrees allow Brazil's national data protection agency to investigate platform non-compliance.
- Penalties for platforms include fines, warnings, or temporary bans if they fail to remove criminal content.
- The move follows a 2025 Supreme Court decision making platforms liable for user content beyond court orders.
Brazil has taken a decisive step to tighten oversight of big tech companies after President Luiz Inácio Lula da Silva signed two key decrees on May 20, 2026. These decrees empower the national data protection agency to enforce a Supreme Court ruling that heightens platform liability for illegal user-generated content.
- The first decree aligns government regulation with a June 2025 Supreme Court decision, holding companies like Google, Meta, and TikTok liable if they fail to remove unlawful content after judicial orders.
- A second decree adds safeguards for women on digital platforms.
- Platforms must promptly evaluate user complaints and, if content is deemed criminal, take it down and inform those responsible. Failure to comply risks fines, warnings, or even temporary bans.
- This regulatory update repeals parts of Article 19 of the Internet Civil Framework that previously required a court order before holding platforms liable for user posts, reflecting a major departure in Brazilian internet law. (analysis)
Legal experts are divided. Patricia Peck, a council member of the national data protection authority, notes Brazil is "taking a side road" due to the lack of specific platform legislation. However, Mattheus Puppe, a digital law specialist, questions whether the agency has enough resources for effective investigation and enforcement.
Brazil’s approach increasingly mirrors the European Union in regulating global tech firms, suggesting stricter compliance obligations for corporate legal teams operating in the region.
By the numbers:
- May 20, 2026 — Date presidential decrees were signed
- 2 — Number of new decrees targeting platform and user protection
- June 26, 2025 — Supreme Court expanded platform liability
Yes, but: It is unclear whether Brazil's data agency has the resources to fully enforce these new mandates.