backOn February 24, 2026, the Federal Senate approved Provisional Measure No. 1,317/2025, converting the Brazilian Data Protection Authority into the National Data Protection Agency, a special federal regulatory entity vested with functional, technical, decision-making, administrative and financial autonomy. The measure formally integrates the entity into the framework of federal regulatory agencies, providing an institutional structure aligned with the scope and complexity of its supervisory and rulemaking responsibilities in the field of personal data protection. A key development is the creation of a dedicated Regulatory and Supervisory Career for Data Protection, including permanent positions for Data Protection Regulation Specialists, thereby enhancing the Agency’s technical and operational capacity.
This institutional reform also reflects the expansion of the Agency’s mandate under Decree No. 12,622/2025, which designates it as the autonomous administrative authority responsible for safeguarding the rights of children and adolescents in the digital environment pursuant to the Digital Statute for Children and Adolescents. Following approval by both chambers of Congress, the provisional measure now awaits presidential sanction. The new framework is intended to strengthen regulatory governance, ensure legal certainty and equip the Agency to address risks associated with digital platforms, emerging technologies and the broader data-driven economy.
share
