On 17 September, the Federal Government issued Provisional Measure No. 1,317/2025, which transforms the National Data Protection Authority (ANPD) into a regulatory agency. With this change, the entity will be renamed the National Data Protection Agency, a special-purpose autonomous authority linked to the Ministry of Justice and Public Security, with functional, technical, decision-making, administrative, and financial independence.
The measure also establishes a new career path for data protection regulation and supervision, creating commissioned positions and trust functions, while reallocating existing vacancies within the Federal Executive to open specialist roles in regulation. These professionals will be responsible for monitoring and enforcing personal data protection. Although already in force, the provisional measure must still be approved by Congress to be permanently converted into law.