Published the Decree Regulating the Digital ECA: Clarifying Technical Parameters and Expanding Platform Responsibilities

After the enactment of the Digital Statute of the Child and Adolescent (Law No. 15,211/2025 – “ECA Digital”) in September last year, the scenario already anticipated that 2026 would bring significant changes in data processing, platform design, and the provision of content accessed by children and adolescents.

With the entry into force of the law on March 17 of this year and the publication of its Regulatory Decree No. 12,880/2026 , this movement takes place. The rule now takes on practical contours, defining how platforms, developers, advertisers, and social networks should operate to ensure a safer digital environment, reinforcing the reach and impact of the new regulatory framework. Among the main aspects, we can highlight:

ANPD Competence

The Decree reinforces that the ANPD (National Data Protection Agency) is responsible for the complementary regulation and supervision of digital practices involving minors.

Age Verification and Technical Adjustments

Age verification is no longer a formality and becomes a central pillar of compliance. Platforms must adopt reliable methods, proportional to the risk of the service and prohibited from any use beyond proof of age, prohibiting practices such as self-declaration in restricted content. This follows the law’s focus on replacing weak mechanisms with effective controls, in line with the ANPD’s preliminary guidelines .

Targeted Advertising and Manipulative Practices

The Decree deepens the prohibition of advertising based on behavioral profiling, emotional analysis and the use of immersive technologies. In addition, it prohibits practices considered manipulative, such as infinite scrolling, autoplay, and usage flows that exploit cognitive vulnerabilities.

Immediate Removal of Sensitive Content

The regulation reinforces that content related to sexual exploitation, kidnapping, grooming or serious risks must be removed immediately, without the need for a court order, and forwarded to the new National Notification Screening Center, integrated with the Federal Police. The goal is to make the flow of complaints faster and more centralized.

Loot Boxes and Monetization Models

The Decree reaffirms the need for age verification in games with loot boxes and requires developers to offer alternatives when necessary. The topic, already debated on an international scale, is now part of a clear regulatory obligation for the Brazilian market.

Parental Supervision and Expanded Responsibilities

The regulation determines that platforms accessed by minors provide effective parental supervision tools, with automatic adjustments according to the age group. Manufacturers of devices aimed at this audience must include mandatory warnings about risks in the digital environment and the need for monitoring.

*     *    *

With the regulation in force, the ECA Digital is no longer just a legislative framework and becomes a fully operational regulatory regime. Companies will need to adapt internal flows, review monetization models, and update their moderation, advertising, and data governance practices. The movement expands the responsibility of platforms and consolidates a new standard of digital safety for children and adolescents in Brazil.

We remain available to support risk assessment, review of practices and adaptation to new regulatory requirements. For more information, please contact our team: digital@kasznarleonardos.com