Brazil's National Data Protection Authority (ANPD) says it can immediately begin monitoring new obligations imposed on digital platforms by Brazil's Supreme Federal Court (STF) and the federal government, according to Correio Braziliense.
The statement places the data regulator at the center of a fast-expanding enforcement framework for large online platforms in Brazil. The ANPD said it is already reorganizing priorities, assigning teams and planning regulatory and inspection work.
What the ANPD Will Do
The agency said its role will focus on whether platforms maintain adequate systems, procedures and complaint channels to comply with the rules. It said it will not act as an appeals body for every individual decision to remove content.
That distinction matters because the new framework gives regulators and courts a larger role in platform accountability, while leaving open practical questions about capacity, legal boundaries and overlap among public agencies.
According to Correio Braziliense, the ANPD said implementation will be gradual, coordinated and risk-based. The agency plans to audit company systems and procedures rather than judge specific posts one by one.
The regulator also said it is studying a centralized channel to receive user complaints about missed removal deadlines, similar to a channel already used for Brazil's digital version of the Child and Adolescent Statute.
New Rules for Platforms
The new framework follows STF decisions and executive decrees that set stricter duties for large online platforms. Correio Braziliense reports that companies will have 60 days to adapt to a so-called duty of care.
One executive rule creates a two-hour requirement for removing non-consensual intimate content, including deepfakes, after notice by the victim. The STF also established a rebuttable presumption of fault for illegal content carried in paid advertisements and required platforms to retain advertiser data for one year.
The immediate-removal duty is reported to apply mainly to seven groups of offenses, including terrorism, inducement to suicide or self-harm, racism, homophobia and transphobia, violence against women, sexual crimes against children, and the category Brazilian authorities describe as "anti-democratic acts."
The transparency and duty-of-care rules apply to providers with more than 1 million users in Brazil, according to Correio Braziliense.
Capacity and Enforcement
The ANPD said its recent conversion into a regulatory agency expanded its administrative, technical and decision-making autonomy. It also cited the creation of its own career track with 200 permanent positions and the hiring of temporary professionals.
At the same time, the agency said more staff, budget, technology and structure will be needed as its responsibilities grow. It said those new duties must not compromise its existing work under Brazil's General Personal Data Protection Law, known as the LGPD, and child-protection rules.
Separate reporting by Estadão shows the ANPD is already weighing sanctions against 21 public bodies and private companies over alleged failures in the handling of personal data. The cases involve entities that allegedly failed to respond to agency requests about their data-protection officer, the person responsible for data governance and communication with the regulator, clients and the organization itself.
For private companies, the harshest penalties can reach R$50 million per violation or 2% of company revenue, according to Estadão. Public bodies may be referred to Brazil's Office of the Comptroller General.
Jurisdiction and Overlap
The ANPD also said large technology companies must maintain a headquarters and legal representative in Brazil, even if their servers and security engineering are abroad. The rule allows them to answer in administrative and judicial proceedings inside the country.
To avoid overlapping fines and jurisdictional conflicts, the agency said it will coordinate with the National Consumer Secretariat, the National Secretariat for Digital Rights and the digital policy unit of the federal communications office.
The coming test will be administrative as much as legal: Brazil has moved quickly to assign duties to platforms, but enforcement will depend on whether regulators can apply the rules consistently, within their institutional limits, and without turning case-by-case speech disputes into routine bureaucracy.