SeterusnyaPanduan seterusnya
Bil AI Brazil (PL 2338/2023)
Masyarakat
PANDUAN Masyarakat
Brazil’s LGPD and AI: The ANPD’s Role
Brazil’s General Data Protection Law (LGPD) already governs personal data used to train or operate AI, and Article 20 gives data subjects a right to request review of certain decisions made solely through automated processing.
Pada halaman ini3 min dibaca
Gambaran keseluruhan
The ANPD applies and enforces data-protection law and has AI-related regulatory work underway; Brazil’s general AI bill, PL 2338/2023, remains a proposal in the Chamber as of September 2026.
Menyelam dalam
Brazil’s LGPD, Law No. 13,709/2018, applies to processing personal data in Brazil and to covered processing linked to people in Brazil, regardless of whether the tool is called AI. It defines personal data broadly and identifies sensitive categories such as health data and biometric data linked to a natural person. Controllers must comply with principles including purpose, adequacy, necessity, transparency, security, prevention, non-discrimination and accountability, and must have an applicable legal basis. Training and inference can both involve regulated processing; using a model does not itself create a new lawful basis. Article 20 gives the data subject the right to request review of decisions taken solely on the basis of automated processing of personal data that affect their interests, including decisions defining personal, professional, consumer or credit profiles. The current text does not promise that every review will be performed by a human. The controller must provide clear and adequate information about criteria and procedures, subject to industrial and commercial secrecy, and the ANPD may audit aspects where secrecy is invoked to protect discrimination. This is a data-protection right with its own scope, not a general AI appeal right for every output. The ANPD is Brazil’s data-protection authority and an independent regulatory agency following 2026 institutional changes. Its 2025–2026 agenda lists an AI project to develop interpretive parameters for Article 20 and other LGPD issues; the project remains in progress. PL 2338/2023 passed the Senate and was sent to the Chamber in March 2025, where it was referred to a special committee and remains under legislative consideration in September 2026. Do not describe that bill as enacted law or treat ANPD’s consultation and agenda as binding AI regulations.
Kesan Strategik
Risiko dan keselamatan
Kemudaratan AI malapetaka dan setiap hari bergantung pada siapa yang memahami risiko dan siapa yang boleh bertindak.
Keputusan yang lebih jelas
Celik awam dan profesional membentuk sama ada dasar keselamatan yang kukuh adalah mungkin dari segi politik.
Memotong keterujaan
Penjelasan yang jelas mengurangkan tangkapan oleh gembar-gembur, PR makmal dan teater etika yang tidak jelas.
The Future of Brazil’s LGPD and AI: The ANPD’s Role
ANPD’s agenda identifies AI and high-risk processing as ongoing regulatory projects, and its 2026 priorities include AI and emerging technologies involving personal data. Those activities may produce guidance or rules later, but do not replace the LGPD currently in force. Recheck the Chamber’s PL 2338 record and ANPD’s official agenda before treating a proposal, consultation or technical sandbox as a binding requirement. Maintain a dated record of the official text and check for new laws, court interpretations and agency guidance before each material update to policy or system use.
Pelaksanaan Dunia Sebenar
A lender checks whether an automated credit profile makes a decision based solely on personal data and provides a channel for an Article 20 review request.
A model team documents the LGPD legal basis, purpose, data minimization and security controls for training data containing personal information.
A privacy officer tracks ANPD’s AI project separately from binding LGPD duties and from the still-pending general AI bill.
A product manager identifies whether biometric or health inputs are sensitive personal data and verifies the applicable legal basis before use.
Risiko & Pengawal
Merawat risiko kewujudan sebagai sci-fi manakala sebatian keupayaan.
Mengelirukan keselamatan produk permukaan dengan penjajaran di bawah autonomi tinggi.
Meninggalkan khalayak bukan Inggeris dan bukan pakar dengan hanya sumber berkualiti rendah.
Hala Tuju Pelaksanaan
Asingkan bahaya produk, penyalahgunaan dan kehilangan kawalan / risiko salah jajaran.
Tanya apakah bukti yang akan mengubah pandangan anda tentang garis masa dan keterukan.
Lebih suka sumber utama dan penilaian konkrit berbanding tuntutan pemasaran.
Kenal pasti satu laluan tindakan: kerjaya, dasar, pembiayaan atau kemahiran — bukan sahaja kesedaran.
Teruskan Meneroka
Free newsletter
Get the daily AI briefing
Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.
One email each weekday. Unsubscribe in one click. We never sell or share your address.
Test yourself
Take the Brazil’s LGPD and AI: The ANPD’s Role quiz
Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.
Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation
Soalan lazim
What is Brazil’s LGPD and AI: The ANPD’s Role?
Brazil’s General Data Protection Law (LGPD) already governs personal data used to train or operate AI, and Article 20 gives data subjects a right to request review of certain decisions made solely through automated processing. The ANPD applies and enforces data-protection law and has AI-related regulatory work underway; Brazil’s general AI bill, PL 2338/2023, remains a proposal in the Chamber as of September 2026.
What does LGPD Article 20 let a data subject request?
Article 20 establishes a request-for-review right for qualifying decisions based solely on automated processing that affect the person’s interests.
Does the current text of Article 20 guarantee that a natural person must perform every review?
Article 20 says a data subject may request review; its current text does not specify that every review must be by a human.
Which is a sensitive-data category under the LGPD when linked to a natural person?
The LGPD includes biometric data linked to a natural person among sensitive personal data.
Where does PL 2338/2023 stand as of September 2026?
The Senate record shows referral to the Chamber; the Chamber docket places it in a special committee with later 2026 activity.
Which role does the ANPD perform in Brazil’s data-protection system?
The ANPD enforces the LGPD and lists an AI regulatory project focused on Article 20 and other data-protection issues.
Teruskan belajar
Panduan berkaitan
Lebih banyak panduan dipilih untuk topik ini