The ANPD in Action: Highlights for 2025

2025 was a landmark year for Brazil’s National Data Protection Agency (ANPD – Agência Nacional de Proteção de Dados). Not only did the Agency step into its new role as a full-fledged regulator – complete with a name change from Authority to Agency – but its approach signaled a fresh chapter for data protection in Brazil.

As Brazil’s General Data Protection Law (LGPD – Lei Geral de Proteção de Dados Pessoais) reached its fifth anniversary, the ANPD became noticeably more proactive and assertive, setting the tone for a new era.

Here’s a look at some of the Agency’s most notable actions and decisions from the past year.

• Biometric Data Processing

• Keeping an Eye on Data Protection Officers
  

• International Data Transfers

• Children and Adolescents: the ANPD is now officially in charge of regulating and overseeing compliance with Brazil’s new Digital Statute for Children and Adolescents (Law 15.211/2025)

• A Firm Hand: new enforcement cases