The Agência Nacional de Proteção de Dados (ANPD) published the Priority Enforcement Topics Map for the 2026–2027 biennium and updated its 2025–2026 Regulatory Agenda, with the aim of guiding its regulatory and enforcement activities in the coming years. The documents reinforce the coordinated application of the Brazilian General Data Protection Law (LGPD) and the Digital Statute of the Child and the Adolescent (ECA Digital).
The Priority Topics Map sets out four core enforcement axes for 2026–2027: (i) data subjects’ rights; (ii) the protection of children and adolescents in the digital environment; (iii) the processing of personal data by the public sector; and (iv) artificial intelligence and emerging technologies. These topics were defined based on analyses of incidents, requests, enforcement actions, and other inputs collected over the past two years.
With regard to the ECA Digital, the ANPD indicated that initial actions will focus on regulation, guidance, and monitoring, including the assessment of privacy by design and privacy by default principles and the implementation of measures to prevent children and adolescents from accessing inappropriate content. In a subsequent phase, the Authority is expected to begin targeted enforcement, including the review of age-verification mechanisms, with enforcement implementation scheduled from 2027 onward.
According to the published timeline, monitoring of the ECA Digital’s implementation will begin in 2026, focusing on oversight and regulatory alignment, while specific enforcement of age-verification mechanisms is planned for 2027.