How it works
AI regulation in Brazil is the set of laws, sectoral rules, public policies and legislative proposals that guide the development and use of artificial intelligence systems in the country. The topic involves protection of rights, safety, transparency, accountability, innovation and the distribution of duties among those who develop, provide and use systems.
There is no single page or project that represents all applicable regulation. Existing rules, such as the LGPD when personal data is processed, can apply to AI activities. At the same time, specific proposals discussed in Congress may define additional obligations in the future. It is important to separate a law in force from a bill still under consideration.
Bill PL 2338/2023, known as the AI Legal Framework bill, was approved by the Senate and continues under discussion in the Chamber of Deputies, according to the update published by the Senate in October 2026. In parallel, the Federal Government reported having sent a bill on AI governance, with an update on October 26, 2026. Proposals can change during processing and should not be treated as obligations already in force.
Practical example
A company uses AI to summarize resumes and recommend which applications should be evaluated first. Before deploying the system, it needs to identify which personal data is processed, explain the purpose, limit access and assess whether errors can harm candidates.
The team also documents where the data came from, who chose the criteria and how a person can review a recommendation. If the bill under debate changes or is approved, the company checks which provisions were actually enacted, when they come into effect and which authorities have jurisdiction over the sector.
This preparation does not replace a legal analysis. The example shows how practical governance can start before a specific rule comes into force: inventory uses, map data, record responsible parties, test impacts and maintain a process to correct problematic decisions.
What it is for
Regulation seeks to establish limits, duties and supervision mechanisms so that AI systems are developed and used in a way compatible with rights and the public interest. For organizations, following the rules helps identify risks, prepare documentation and avoid confusing a political proposal with a current legal obligation.
Those who develop or contract AI should follow official sources, such as the National Congress, ministries and competent authorities. Record the date of consultation and the normative text analyzed. News, commentary and presentations can help understand the debate, but legal obligation must be confirmed in the official text and with qualified guidance.
Monitoring legislation is especially important in areas such as health, credit, employment and public services, in which an automated decision can affect people in a relevant way. This explanation is informational and does not replace legal advice on a specific case.