Skip to content
safelaunch
← All markets

Americas · 3 laws · 21 requirements

Brazil: the laws your website or app must follow

If your customers are in Brazil, these are the privacy, consumer, security, accessibility and AI laws SafeLaunch checks your site against, with what each one requires and where in the law it says so.

How a SafeLaunch audit checks each one
  • CheckedChecked automatically on every scan
  • AI reviewLooked for by the AI analysis, reported only with evidence
  • Your answersDecided from your answers to the audit questions
  • PreparedPrepared for you in the report's compliance pack
  • You confirmA scan can't see this; you need to confirm it

LGPD

In force; ANPD regulations on incidents (Res.

Who it covers: Processing in Brazil, of people in Brazil, or to offer goods or services there.

What it requires of a website or app (11)

  • Be able to prove consent was given: the burden is on you (if if you rely on consent)CheckedArt. 8 §2
  • A legal basis for each use (Art. 7) and for sensitive data (Art. 11)AI reviewArt. 7, 11
  • Clear information: purpose, form and duration, controller identity and contact, sharing, rightsCheckedArt. 9
  • Publish the identity and contact of the DPO (encarregado)CheckedArt. 41 §1; Res. 18/2024
  • Consent for cookies that aren't necessary (ANPD cookie guidance)CheckedArt. 7–8; ANPD guide 2022
  • Rights: confirmation, access, correction, deletion, portability, information on sharingCheckedArt. 18
  • Children's data in their best interest, with parental consent for under-12s (if if children use the product)Your answersArt. 14
  • Security measuresCheckedArt. 46
  • Report security incidents to the ANPD and data subjects within 3 business daysCheckedArt. 48; Res. 15/2024
  • International transfers using ANPD standard contractual clauses or another Art. 33 mechanismCheckedArt. 33; Res. 19/2024
  • A record of processing operationsPreparedArt. 37

Sources:LGPD (Planalto)

Consumer Defense Code

In force; e-commerce decree 7.962/2013.

Who it covers: Suppliers selling to consumers in Brazil.

What it requires of a website or app (7)

  • A 7-day right of withdrawal for purchases made outside a physical store (if if you sell to consumers)CheckedArt. 49
  • Company name, CNPJ/CPF, address and contact shown prominently on the site (if if you sell to consumers)AI reviewDecree 7.962/2013 Art. 2
  • No misleading or abusive advertisingCheckedArt. 37
  • The supplier's name, CNPJ, address and contact are shown on the site (if if you sell to consumers)CheckedDecree 7.962/2013 Art. 2
  • The 7-day right of regret for online purchases is explained and honoured (if if you sell to consumers)CheckedArt. 49
  • No abusive clauses (waiving rights, excluding liability, unilateral changes) (if if you sell to consumers)CheckedArt. 51
  • Recurring charges are disclosed clearly and can be cancelled online (if if you sell subscriptions)CheckedArt. 6(III); Decree 7.962/2013

Sources:CDC (Planalto)

Digital ECA (Law 15.211/2025)

Enacted Sept 2025; in force from March 2026.

Who it covers: Digital products and services likely to be used by children and teenagers in Brazil.

What it requires of a website or app (3)

  • Reliable age verification for pornographic and other content forbidden to minors (self-declaration is not enough) (if if you publish adult content)CheckedLaw 15.211/2025
  • Protective defaults and parental supervision tools for minors' accounts (if if minors can use the product)Your answersLaw 15.211/2025
  • No paid random rewards (loot boxes) in games for minors (if if you offer games to minors)AI reviewLaw 15.211/2025

Sources:Lei 15.211/2025 (Planalto)

Licensed professionals in Brazil

These regulators' advertising and conduct rules apply on top of the laws above, only to sites of that profession.

Check your site against Brazil's rules

A free scan checks your website or app against these rules in about a minute and shows what applies, with evidence from your pages. The full report gives the exact fix for each finding.

Check my site free

One free fix in your inbox each week

A new copy-paste prompt for Lovable, Cursor or Claude Code every week, with the rule behind it and how to check it worked, plus the Monday briefing on new laws and deadlines. No spam, unsubscribe in one click.

By signing up you agree to get these weekly emails. We send it with Kit, and you can unsubscribe at any time. What we share with Kit is in our privacy notice.

A plain-language summary of what each law requires of a website or app, from the SafeLaunch rulebook, with the provision and official sources. It is not legal advice and not every duty in each law is listed.