Brazil has issued decrees raising the bar for tech platforms, assigning them clearer duties to remove illegal content and allowing the national data protection agency to probe compliance
The Brazilian president has issued two executive decrees that change how digital platforms must handle illegal material posted by users. One decree aligns administrative rules with a prior Supreme Court decision that can hold platforms accountable when they fail to comply with a judicial order to take content down.
The move also authorizes the country’s national data protection authority to open inquiries into how companies respond to such demands. A separate decree lays out guidelines aimed specifically at protecting women in the digital environment, reflecting growing concern about online abuse and new forms of violence.
Together the measures increase pressure on global companies such as Google, Meta and TikTok, which have relied on legal defenses to distance themselves from users’ crimes. Under the updated framework, platforms are required to evaluate complaints and, when content is determined to be criminal, remove it promptly and notify the account holder.
The decrees also create a spectrum of administrative sanctions — from warnings to fines and temporary suspensions — for non-compliance, while empowering regulators to follow up. At the time of publication, major technology companies had not issued a response to the government’s action.
What the decrees change in practice
The primary effect of the first decree is practical: it modifies existing regulations to make them consistent with the Supreme Court ruling that assigns removal obligations to platforms that ignore judicial takedown orders. This update transforms judicial decisions into enforceable administrative expectations and connects the casework to the national data protection authority, which can now investigate platform behavior. The reforms broaden the legal toolkit to address not only hate speech and incitement but also the expanding set of harms such as digital fraud, online scams and evolving forms of gender-based online violence. The second decree specifically frames protective actions for women, signaling a recognition of gendered harms online.
Liability, enforcement and penalties
Under the new rules, platforms must review complaints and act quickly when content is criminal. The enforcement model couples administrative oversight with a range of penalties intended to deter inaction: initial warnings can escalate to monetary fines or temporary platform suspensions for persistent breaches. The authority’s ability to investigate means regulatory scrutiny will no longer be purely judicial; administrative follow-up can verify whether companies complied with removal orders and internal moderation standards. The government positions these measures as a way to stop platforms from profiting from illegal posts, though how effectively investigations will be carried out depends on the regulator’s resources and capacity.
Reactions from experts and civil debate
Legal and technology specialists welcomed the move as an effort to force platforms to consider ethics, privacy and security in product design, while also warning about practical limits. A council member of the national data protection authority, who has written extensively on law and technology, noted that the executive and judicial branches have pushed platforms toward proactive moderation amid slow legislative progress. Observers say this path effectively creates regulatory obligations through decrees and court rulings rather than new laws. Critics worry that placing heavy enforcement responsibilities on companies could incentivize overly broad removals, with implications for free speech and public discussion.
Capacity and international context
Some analysts express skepticism about implementation because the agency tasked with enforcement already faces capacity constraints. One expert in digital law described the decrees as reinforcing the Supreme Court stance, but questioned whether the chosen regulator can adequately investigate complex cases. The policy shift places Brazil closer to the regulatory approach seen in the European Union, which has pursued stronger limits on platform power. At the same time, the measures have raised concerns internationally, particularly among stakeholders wary that aggressive takedown obligations could chill speech if platforms react by removing borderline content pre-emptively.
Broader policy milestones and next steps
The decrees arrive after other recent Brazilian actions to shield vulnerable users online, including a law aimed at protecting minors by requiring under-16s to link social accounts to an adult and curbing addictive features such as infinite scroll and auto-play. Together, these initiatives signal a comprehensive push to reshape the digital landscape through executive orders, judiciary rulings and statute. Moving forward, the effectiveness of the new decrees will hinge on enforcement capacity, corporate responses, and whether lawmakers choose to codify similar obligations in formal legislation rather than relying on administrative and judicial instruments.
