On December 17, 2025, the joint committee responsible for the initial review of Provisional Measure No. 1,317/2025 approved the text that transforms the National Data Protection Authority (ANPD) into a regulatory agency. The measure was approved with amendments proposed by the rapporteur, Senator Alessandro Vieira (MDB–SE), and now proceeds to the Chamber of Deputies for consideration. With the vote on the report, the joint committee concluded its work.
With the approval of the measure, the ANPD ceases to be a standard federal autarchy and becomes an autarchy of a special nature, endowed with functional, technical, decision-making, administrative, and financial autonomy. This change consolidates the authority as Brazil’s data protection regulator, strengthening its institutional stability and expanding its operational capacity to carry out its statutory responsibilities.
The approved text also reinforces the agency’s institutional structure by providing for the creation of specialized regulatory positions through the transformation of vacant posts, without increasing public expenditures, thereby enhancing the authority’s technical capabilities and to ensure that the entity will be able to operate.
Among the new agency’s responsibilities is the enforcement of the Digital Statute for Children and Adolescents (ECA Digital), which aims to protect children and adolescents in the digital environment. The ECA Digital originated from Bill No. 2,628/2022, authored by Senator Alessandro Vieira, approved by the Senate in late August 2025 and enacted into law in mid-September of the same year.