AI and data laws

311 moving · 704 enacted

BrazilBrazilLawLei 15.352/2026 (conversion of Medida Provisoria 1.317/2025)

Law restructuring the ANPD as the National Data Protection Agency

Amends the LGPD to establish the Agencia Nacional de Protecao de Dados (ANPD) as a special autonomous federal agency, creates a data protection regulation and enforcement career, and sets the ECA Digital's entry into force for 2026-03-17.

In forceIntroducedCommitteeFloorLawIn force

Converted into Law 15.352/2026, published in an extra edition of the Diario Oficial da Uniao and in force on publicationFeb 25 8 months ago

Body
National Congress; Presidency of the Republic
Session
57th Legislature
Introduced
Sep 17, 2025
In effect since
Feb 258 months ago

Timeline

  1. Feb 25 8 months ago

    Converted into Law 15.352/2026, published in an extra edition of the Diario Oficial da Uniao and in force on publication

  2. Sep 17, 2025 1 year ago

    President adopts Provisional Measure 1.317/2025 on the ANPD (published in the Diario Oficial da Uniao on 2025-09-18)

Brazil
BrazilRE 1037396 (Tema 987) and RE 1057258 (Tema 533)

STF ruling on Marco Civil da Internet article 19 platform liability

Declares article 19 of the Marco Civil da Internet partially unconstitutional and holds internet application providers civilly liable for certain third-party content after notice, and without notice for paid ads, bot networks and a list of serious crimes, until Congress legislates.

Ruled
Brazil
BrazilLei 15.211/2025 (PL 2628/2022)

Digital Statute of Children and Adolescents (ECA Digital)

Sets duties for providers of digital products and services likely to be accessed by children and adolescents, including age verification, parental supervision tools and protection against harmful content.

In force
Brazil
BrazilResolucao CD/ANPD No. 19/2024

ANPD International Data Transfer Regulation

Sets rules under the LGPD for international transfers of personal data and approves standard contractual clauses that controllers using contractual clauses must adopt.

In force
Delaware
DelawareHB 380

Delaware Personal Data Privacy Act Amendments

Amends the Delaware Personal Data Privacy Act to align it with other states' laws, including lowering the applicability threshold to entities processing data of at least 15,000 consumers.

Enacted
California

Consumer Privacy: Deletion Requests

Would expand the CCPA right to delete to all personal information a business has collected about a consumer and require businesses to offer an online method for submitting privacy requests.

Enacted

Change log

  • AddedAdded to the list. Set by hand from the official record.Sep 27

Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.