PrivacySignal
News

Brazil reshapes children's data protection under the 'Digital ECA' framework

IAPP · · International · Privacy Law

Brazil has introduced a new legal framework known as the 'Digital ECA,' extending its existing child and adolescent protections into the digital environment. The rules place new obligations on platforms and data processors handling children's personal information.

Why this matters: Children's data is one of the clearest cases where the burden should fall on platforms, not on parents to figure out fine print. Brazil is drawing a harder line: if you collect data on kids, the law now has specific teeth for the digital context, not just general principles borrowed from adult privacy rules. That matters because children cannot meaningfully consent, and most platforms were not designed with their interests first. Watch how enforcement takes shape — rules on paper only move the needle when someone is actually held responsible.

Who should care: General readers · Privacy officers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories