Brazil's Digital Statute for Children and Adolescents, known as the Digital ECA, came into effect on 17 March 2026, establishing a new legal framework for the protection of minors under 18 in the online environment.
Technology companies operating in Brazil are now required to remove harmful content immediately upon identification and notify relevant authorities both domestically and internationally.
Prohibited content categories include material related to child sexual abuse, physical violence, drug use, self-harm, suicide and the promotion or sale of gambling products.
Companies had six months to adapt their systems and processes ahead of the law's implementation.
Accounts belonging to users aged 16 and under must now be linked to a parent or guardian, with platforms required to provide accessible parental supervision tools. These tools must allow parents to restrict communication with unauthorised adults, limit features that encourage excessive use, control recommendation algorithms and manage geolocation sharing.
Crucially, age verification must go beyond self-declaration, with companies required to adopt reliable verification mechanisms for each access attempt.
The law also prohibits loot boxes in video games, citing expert concerns that such mechanics can encourage compulsive behaviour.
An independent administrative authority will be established to oversee compliance and issue further regulatory guidance.
Penalties for non-compliance include warnings, fines of up to 10% of company revenue, temporary suspension and potential prohibition from operating in Brazil.
Foreign companies are subject to joint liability through their local branches.
The law forms part of a broader period of regulatory development in Brazil, which has also seen new tax reporting obligations introduced for betting winnings and continued expansion of the licensed sports betting market.
The law also bans loot boxes in video games, citing concerns over their potential to encourage compulsive behaviour among younger users
