Ships a mobile app, in Brazil

Lei nº 15.211, de 17 de setembro de 2025 · Read the law's page

• Applies to any information-technology product or service (internet applications, software, terminal operating systems, app stores, connected games) directed at children or adolescents in Brazil or likely to be accessed by them, wherever the provider is located.
• Observe duties of prevention, protection, information and security, taking the best interest and integral protection of the child or adolescent as the guiding standard (Art. 5).
• Implement your own mechanisms to prevent children and adolescents from accessing content unsuited to their age range, independently of the measures an app store or operating system adopts (Art. 14).
• Provide parental-supervision tools (Arts. 16 to 18), and do not design, modify or manipulate an interface to undermine a user's autonomy or decision-making where that weakens those tools or safeguards (Art. 18, para. 2).
• If you provide an app store or terminal operating system, take proportionate, auditable and technically secure measures to assess users' age or age range, let parents configure voluntary supervision, and make an age signal available to app providers through a privacy-by-design API limited to this law's purposes (Art. 12).

Decreto nº 12.880, de 18 de março de 2026 · Read the law's page

• Applies, as the regulation of Lei nº 15.211/2025, to suppliers of information-technology products or services that make available content, products or services prohibited or improper for children and adolescents, to social network services, and to app stores and operating systems.
• If you make available content, a product or a service prohibited to children and adolescents (weapons, alcohol, tobacco, gambling, loot boxes, pornographic content, escort services, services for arranging sexual encounters), implement effective age verification mechanisms and effectively prevent access by children and adolescents (art. 15).
• For gambling, loot boxes, pornographic content, escort services and services for arranging sexual encounters, bar the creation of accounts and profiles by children and adolescents, and identify and remove accounts they operate (art. 15, § 2).
• If you make available pornographic content, your own or a third party's, adopt your own age verification mechanisms that ensure no access by children and adolescents, even in previews, images, titles or captions (art. 16, § 1).
• If a user is not registered, the age is not verified or the account is operated by a child or adolescent, hide, blur or do not display pornographic content by default, or require age verification to unlock it; self-declaration alone is not enough (art. 17).
• If you offer or intermediate the sale of weapons, alcohol, tobacco, addictive products, fireworks, gambling or loot boxes, implement effective age verification at registration, with purchases blocked by default and no unlock by self-declaration, or at the time of purchase (art. 18).
• If you operate a social network service that makes available content, products or services prohibited to children and adolescents, create versions without them or adopt effective age verification; self-declaration is not enough (art. 19).
• If you collect documents to assess age, keep only the age or the confirmation of the age range, and delete the image, the copy of the document and the information immediately and irreversibly after capturing what you need (art. 24, § 3).
• If you operate an app store or an operating system, provide users' age signals to application suppliers free of charge, limited to what is strictly necessary to confirm the minimum age and with no exact date of birth, civil identity or profiling data; ask for age or age range at account creation, assess age by a reliable method, allow the user to contest the result, and take measures against multiple accounts (art. 25, caput, §§ 1 and 2).
• If you operate an app store or an operating system, request the legal guardians' authorization before a child or adolescent downloads or installs an application, and tell the guardians the age rating assigned to it before they authorize (art. 25, § 3).
• If you supply a product or service that offers content improper, inadequate or prohibited for children and adolescents, receive the age signals from app stores and operating systems and adapt the product or service; if your own age assessment differs from the signal, apply the alternative that better protects children and adolescents, and give the user a way to contest the assessed age (arts. 26 and 27).