Skip to main content

Brazil AI Bill

AI Framework Bill (PL 2338/2023)

Risk-based framework similar to EU AI Act. Would prohibit excessive-risk AI (social scoring, autonomous weapons), require impact assessments for high-risk AI, with penalties up to BRL 50M or 2% Brazilian turnover.

Jurisdiction

Brazil

Enacted

Pending

Effective

TBD

Enforcement

TBD

Senate approved December 10, 2024. Forwarded to Chamber of Deputies March 17, 2025; Special Commission established April 29, 2025. Now proceeding jointly with the government's PL 6036/2025 (sent December 2025 to cure a constitutionality defect); no final Chamber vote scheduled as of August 2026.

Library of Congress

Why It Matters

Would be first comprehensive AI law in Latin America. Copyright provisions are globally unique.

Recent Developments

Still before the Chamber of Deputies Special Commission on AI (president Luísa Canziani, rapporteur Aguinaldo Ribeiro) with no final vote as of August 2026. In December 2025 the federal government sent Congress PL 6036/2025, a new AI-governance bill drafted to cure the constitutionality defect identified in the Senate-passed PL 2338/2023; the Chamber's tramitação record shows the two bills joined for processing (reported as apensado on June 17, 2026, with related PL 974/2026) and proceeding with priority status. Approval expectations have slipped repeatedly, most recently to late 2026.

At a Glance

Applies to

Foundation ModelGeneral ChatbotAutonomous VehicleRecruitment AICredit ScoringHealthcare AIAutomated Decision System

Harms addressed

Safety Provisions

  • Excessive risk AI prohibited (social scoring, autonomous weapons)
  • High-risk AI requires algorithmic impact assessments
  • Copyright protections allowing creators to prohibit AI training use
  • Fair remuneration requirements for training data

Compliance & Enforcement

Penalties

BRL 50M or 2% revenue (whichever higher)

View on map

Brazil

Focus Areas

Algorithmic accountability

Cite This

APA

Brazil. (n.d.). AI Framework Bill (PL 2338/2023).

Related Regulations

In Effect BR

Brazil ECA Digital

Comprehensive child digital safety law applying to any IT product or service directed at or likely to be accessed by minors in Brazil, with extraterritorial reach.

Enacted US-CO

Colorado AI Act

Colorado law regulating automated decision-making technology (ADMT) that materially influences consequential decisions in areas such as employment, housing, healthcare, financial services, and insurance. SB 26-189 repealed and replaced the 2024 Colorado AI Act framework, narrowing both scope and obligations.

Enacted US-NY

NY RAISE Act

Requires large AI developers of frontier models operating in New York to create safety protocols, report critical incidents within 72 hours, conduct annual reviews, and undergo independent audits. Creates dedicated DFS office funded by developer fees.

Enacted IT

Italy D.Lgs. 179/2026

Second of the two legislative decrees implementing Italy's AI law (Law 132/2025). It designates the national authorities under the EU AI Act, sets national administrative fines for AI Act breaches, creates the Italian AI regulatory sandbox, and adds rules on AI in schools, work, the professions, health and public administration, including a bar on employment decisions taken solely by automated processing.

In Effect CA-QC

Quebec Law 25

Quebec's major privacy reform modernizing data protection laws with extraterritorial scope similar to GDPR. First Canadian provincial framework to directly address AI implications through automated decision-making provisions requiring disclosure, explanation rights, and human intervention options.

Enacted US-CA

CA AB 2246

Repeals and replaces the California Age-Appropriate Design Code Act. Requires a business providing an online service, product or feature likely to be accessed by children to estimate the age of child users with a reasonable level of certainty or extend child protections to all users, to configure high-privacy defaults, and to take reasonable steps to prevent specified harms including severe psychological harm. Removes the exceptions to the data-collection prohibitions, lets children void contracts entered through manipulative design features, and states that it creates no private right of action.

Last updated August 9, 2026. Verify against primary sources before relying on this information.