Brazil ANPD opens a complaints page for platforms that breach the new Marco Civil decrees 12.975 and 12.976 of 2026

Brazil ANPD opens a complaints page for platforms that breach the new Marco Civil decrees 12.975 and 12.976 of 2026

5 October 2026 — On 5 October 2026 Brazil's National Data Protection Authority (ANPD) published a dedicated web page for receiving online reports of non-compliance with Decrees No. 12.975/2026 and No. 12.976/2026. The two decrees update the regulation of the Marco Civil da Internet, Brazil's internet framework law, and widen the ANPD's role in supervising internet application providers, including digital platforms and social networks.

Not yet independently verified. Single source: the ANPD news item. The decrees themselves were not read, so their publication dates, in-force dates, deadlines and penalty levels are not stated here. The complaints page itself was not opened. We will update this when it can be confirmed, and remove this note.

What changed

According to the ANPD, any person or company can now tell the authority, through the new page, about problems such as the lack of adequate channels on a platform for notices about criminal or unlawful content, failures in the mechanisms meant to stop adverts or boosting of that content, the absence of a legal representative in Brazil, missed deadlines for removing content, and failures in measures against the spread or generation of intimate content. The page lists further types of breach.

The ANPD describes the decrees as follows. Decree 12.975/2026 details platform duties on transparency, risk prevention and mitigation, action against online fraud and scams, and making criminal or unlawful content unavailable. Decree 12.976 sets guidelines to protect women from digital violence, including intimate content produced, altered or spread with digital technologies and artificial intelligence.

The authority says its work is to examine breaches of these duties, including the duty of care of providers that intermediate third-party content, and to check whether platforms have suitable mechanisms, processes, governance structures and technical and organisational measures. It does not investigate crimes. Matters that amount to crimes go to the police, and for violence against women involving intimate content the national helpline Ligue 180 can also be used.

Who is affected

Providers of internet applications that carry user-generated content: social networks, marketplaces, messaging and video services and similar products, including foreign providers serving users in Brazil. The reference to a legal representative in Brazil makes the local-presence question relevant to non-Brazilian vendors. Companies that run advertising or boosting products also fall within the fraud and advert controls the page mentions.

What to do

Providers can compare their Brazilian notice-and-takedown channels, response times, legal representation, advert review and handling of intimate-content reports with the duties in the two decrees, read in the official text on the Brazilian government's legislation site. Legal and trust-and-safety teams can expect complaints to arrive through this channel and should know who answers an ANPD enquiry. Businesses that buy moderation, fraud-detection or advertising tools can ask vendors how their products support these duties.

Why it matters

A complaints channel gives the authority a stream of leads for monitoring and enforcement, so non-compliance is more likely to be noticed. It also shows the ANPD acting as a platform supervisor as well as a privacy regulator. TrustList has already reported on the ANPD's separate consultation on its enforcement rules; this item is a different workstream with its own obligations.

Sources

• ANPD, ANPD lança página específica para denúncias de infrações aos novos decretos do Marco Civil da Internet — 5 October 2026