Brazil's ANPD Drops Age Verification Bombshell: What Your Business Must Do Now
Table of Contents
If you think reading Terms & Conditions is fun as cleaning grout with a toothbrush, wait until you see Brazil's new age verification rules. The ANPD just dropped a 30-page preliminary guideline that will make you rethink how you handle user data—especially if you're in the business of serving content to anyone under 18.
What the ANPD Actually Said
The Brazilian National Data Protection Authority (ANPD) published preliminary guidelines and a timeline for age verification in digital environments. This isn't a suggestion—it's a regulatory roadmap that will affect every company operating online in Brazil.
Featured Snippet Bait: The ANPD's age verification guidelines require companies to implement proportionate measures to confirm user age without collecting excessive data, balancing minor protection with privacy rights under the LGPD.
Key Requirements at a Glance
- Companies must adopt age verification methods that are effective but not overly invasive.
- Data collected for age verification cannot be used for other purposes (no, you can't use it for targeted ads).
- Minors' data must be processed with special safeguards, including parental consent for under-12s.
Think of it like a bouncer at a club: they need to check your ID, but they don't need to photocopy it and share it with the DJ. The ANPD wants digital bouncers that are strict but respectful.
Timeline: When Do You Need to Comply?
The ANPD has set a phased timeline. By Q3 2025, all high-risk services (social media, gaming, adult content) must have age verification in place. By Q1 2026, it applies to all digital services. If you're not already testing solutions, you're behind.
What This Means for Your Business
First, audit your current data collection. If you're asking for birth dates or running AI-based age estimation, check if it's proportional. Second, update your privacy policy to explain how you verify age. Third, prepare for enforcement: fines under the LGPD can reach 2% of revenue in Brazil.
For more details, read the official ANPD publication.
FAQ
What age verification methods does the ANPD recommend?
The ANPD suggests methods like self-declaration with random checks, digital ID verification, and AI-based age estimation, but emphasizes that the method must be proportionate to the risk.
Do I need parental consent for all minors?
Yes, for children under 12, the LGPD requires explicit parental consent. For teens aged 12-17, consent is still needed but can be adapted based on the service's risk level.
What happens if I don't comply?
Non-compliance can result in warnings, fines up to 2% of your Brazilian revenue (capped at R$50 million per violation), and even suspension of data processing activities.
🔍 Age Verification Readiness Checklist
NakedPact Editorial Committee
Article created by the NakedPact editorial team. Our mission is to analyze, simplify, and expose unfair terms and hidden risks in everyday contracts to protect citizens and consumers.
Sources and Legal References
Do you own a website?
Want to communicate your data processing transparency to your users? Dynamically use our badge and showcase your platform's compliance.
Recommended Readings
🛡️ Protect your rights with one click
Don't risk signing abusive clauses. Install the free NakedPact extension for Chrome or Firefox and instantly analyze any contract on the web.
Don't trust, verify.
Now that you know the risks, don't sign blindly. Upload your contract to NakedPact and let AI find the hidden clauses for you. It's 100% free.
Analyze Your Contract Now