backNewsletter (#01/2026) on Privacy and Data Protection by Campos Thomaz Advogados
Alerts, materials, and updates on Privacy, Data Protection, and Cybersecurity.
To subscribe, click here.
Find out more about our DPO as a Service
We have prepared specific material to explain how the external DPO as a Service works. Contact our partners
Brazil and the European Union Recognize Mutual Data Protection Adequacy and Simplify International Data Transfers
On January 27, 2026, Brazil and the European Union formalized the reciprocal recognition of the adequacy of their respective personal data protection regimes, pursuant to the Brazilian General Data Protection Law LGPD and the General Data Protection Regulation GDPR. With this decision, both jurisdictions acknowledge that their legal frameworks provide equivalent levels of protection for personal data, establishing a legal environment that enables the free and streamlined international transfer of personal data between the regions, thereby eliminating the need, in such cases, to adopt standard contractual clauses. Learn more.
ANPD extends deadline for submission of information under the Digital ECA monitoring process
The Brazilian Data Protection Authority has extended the deadline to February 13, 2026, for companies subject to Law No. 15,211/2025 (Digital ECA) to submit information regarding the technical and organizational measures adopted to comply with the new rules on the protection of children and adolescents in the digital environment. The extension is part of a monitoring process conducted by the General Coordination for Enforcement, covering 37 companies with significant influence on children and adolescents in Brazil. Learn more.
ANPD publishes Priority Topics Map for enforcement guidance for 2026–2027 and updates its 2025–2026 Regulatory Agenda
The Brazilian Data Protection Authority published its Priority Topics Map for enforcement guidance for the 2026–2027 biennium, along with an update to its 2025–2026 Regulatory Agenda. The documents set out coordinated guidelines for rulemaking, monitoring, guidance, and potential enforcement activities, focusing on obligations under the General Data Protection Law and the Digital Statute of Children and Adolescents, with the aim of increasing transparency and regulatory predictability. Learn more.
Bill proposes to ban account creation on social media and electronic games by individuals under 16
On December 16, 2025, Bill No. 6,458/2025 was introduced in the Brazilian Chamber of Deputies by Federal Deputy Jorge Goetten (PL/SC), proposing amendments to the Digital Statute of Children and Adolescents (Law No. 15,211/2025). The bill seeks to prohibit the creation of accounts or profiles on social media, electronic games, and digital dating platforms by children and adolescents under the age of 16, establishing direct obligations for service providers. Learn more.
Leak of confidential juvenile court data in São Paulo exposes children and adolescents on legal websites
A report published on December 11, 2025, disclosed the leak of confidential information from court proceedings involving children and adolescents before the São Paulo State Court of Justice, which became improperly available on public legal research websites. The exposed data include names, ages, and details of alleged juvenile offenses, in clear violation of the strict confidentiality rules applicable to juvenile justice cases. According to the São Paulo Public Defender’s Office, the situation is unprecedented and has already caused serious consequences for affected youths, including job losses, school dropout, public embarrassment, and social stigma. Learn more.
OAB-SP seeks to hold platforms and telecom operators liable for “fake lawyer” scams
On December, 2025, it was reported that the São Paulo chapter of the Brazilian Bar (OAB-SP) Association filed a Public Civil Action before the Federal Courts seeking to hold Meta, the National Telecommunications Agency, and telecom operators Vivo, Claro, and TIM accountable for the sharp rise in so-called “fake lawyer” scams. The action responds to the rapid growth of fraud schemes in which criminals impersonate law firms to extort clients, using real court case information, public documents, and, in some instances, artificial intelligence tools to simulate voices and legitimate communications. Learn more.
LGPD Infographic
Access the LGPD infographic prepared by our firm. Access here
Explore our series of content on privacy, data protection, and cybersecurity.
Discover our series of content on privacy, data protection, and cybersecurity. Access the full series here.
Produced by Alan Campos Thomaz and João Marcelo de Oliveira
share
