Skip to main content

The Brazilian National Data Protection Authority’s View On Artificial Intelligence


Despite Brazil having it’s own all-encompassing law on data protection (i.e. the General Data Protection Law - LGPD) and its own regulatory agency (the National Data Protection Authority - ANPD), the arrival and constant development of artificial intelligence has caused intense discussion from a legislative standpoint, including with respect to the role of ANPD over its regulation.

Earlier this year, a bill of law concerning the regulation of artificial intelligence, PL nº 2338/2023, was presented to the House of Representatives and ANPD has recently released it’s analysis and contributions over it (Technical Note nº 16/2023). By way of amendment suggestions to the bill, ANPD basically proposes a new institutional model, provides some intersections between the bill and the LGPD provisions and draws a comparison with international regulations regarding the same topic.

The proposed institutional model for regulating artificial intelligence as suggested by ANPD would be organized into four complementary bodies, with ANPD being the central regulatory body for the topic. The model suggested by ANPD would also include articulated and coordinated action between bodies of the Executive Branch, sectoral regulatory bodies, in addition to the creation of an advisory council, along the lines of the Brazilian National Council for Data Protection and Privacy (CNPD), aimed solely at dealing with the regulation of the implementation and use of artificial intelligence in Brazil.

According to the ANPD, international experience (such as that of the European Union, among others) shows that a centralized approach, anchored in a single body such as ANPD itself, leads to undeniable benefits in the regulation of this subject, as it provides for a clear and consistent line of guidance to all stakeholders involved and avoids the risk associated with potential ambiguity and interpretation discrepancy that can cause legal uncertainty.

ANPD’s analysis also highlights a proposal to assign to the Executive Branch (and not to the competent authority, as provided in the current wording of the bill) the attribution to prepare, manage, update and implement the Brazilian Artificial Intelligence Strategy (EBIA), with the ANPD contributing to the process only within the scope of its responsibilities.

It is noteworthy that the EBIA is a document prepared by the Brazilian Ministry of Science, Technology and Innovation aimed at guiding the Brazilian Government’s actions in favor of the development of various measures that stimulate research, innovation and development of artificial intelligence solutions, as well as its conscious and ethical use for a better future.

In conclusion, ANPD’s key takeaways with respect to PL nº 2338/2023 shows the agency’s clear intention of having an active and central role in the debate on artificial intelligence regulation, in addition to ensuring that the future legislation on the subject is aligned with the principles and guidelines established by the LGPD.


Article provided by INPLP members: Fábio Lacaz (ALV, Brazil)



Discover more about the INPLP and the INPLP-Members

Dr. Tobias Höllwarth (Managing Director INPLP)



Cloud Privacy Check (CPC). Data Privacy Compliance in the Cloud Made Easy

Understand Cloud and Data Protection Law in only 4 easy steps. Plus highly relevant legal information for 33 countries. Provided by EuroCloud and 53 European lawyers.


About Us

EuroCloud is an independent non-profit organization and consists of a two-tier setup where organisations form all European countries can apply to participate in as long as they respect the EuroCloud Statutes.

To act as a true European player, all programs that are developed are intended to be European activities. These European programs are the strength of EuroCloud as a whole. Respect to local cultures along with the will to promote a real European spirit.