Brazil AI Bill
AI Framework Bill (PL 2338/2023)
Risk-based framework similar to EU AI Act. Would prohibit excessive-risk AI (social scoring, autonomous weapons), require impact assessments for high-risk AI, with penalties up to BRL 50M or 2% Brazilian turnover.
Jurisdiction
Brazil
BR
Enacted
Unknown
Effective
Unknown
Enforcement
Not specified
Senate approved Dec 2024; under Chamber review
What It Requires
Harms Addressed
Who Must Comply
Safety Provisions
- • Excessive risk AI prohibited (social scoring, autonomous weapons)
- • High-risk AI requires algorithmic impact assessments
- • Copyright protections allowing creators to prohibit AI training use
- • Fair remuneration requirements for training data
Enforcement
Penalties
BRL 50M or 2% revenue (whichever higher)
Up to BRL 50M or 2% Brazilian turnover
Quick Facts
- Binding
- No
- Mental Health Focus
- No
- Child Safety Focus
- No
- Algorithmic Scope
- Yes
Why It Matters
Would be first comprehensive AI law in Latin America. Copyright provisions are globally unique.
Recent Developments
Special committee established in Chamber April 2025. Notable copyright provisions being debated.
Cite This
APA
Brazil. (n.d.). AI Framework Bill (PL 2338/2023). Retrieved from https://nope.net/regs/br-ai-bill
BibTeX
@misc{br_ai_bill,
title = {AI Framework Bill (PL 2338/2023)},
author = {Brazil},
year = {n.d.},
url = {https://nope.net/regs/br-ai-bill}
} Related Regulations
NY RAISE Act
Requires large AI developers of frontier models operating in New York to create safety protocols, report critical incidents within 72 hours, conduct annual reviews, and undergo independent audits. Creates dedicated DFS office funded by developer fees.
CT SB 1295
Creates COMPLETE BAN on targeted advertising to under-18s regardless of consent. Requires AI impact assessments. Connecticut issued first CTDPA fine ($85,000) in 2025.
Colorado AI Act
First comprehensive US state law regulating high-risk AI systems. Modeled partly on EU AI Act with developer and deployer obligations for consequential decisions.
Quebec Law 25
Quebec's major privacy reform modernizing data protection laws with extraterritorial scope similar to GDPR. First Canadian provincial framework to directly address AI implications through automated decision-making provisions requiring disclosure, explanation rights, and human intervention options.
NZ Biometric Code
Sets specific legal requirements under Privacy Act for collecting and using biometric data such as facial recognition and fingerprint scans. Prohibits particularly intrusive uses including emotion prediction and inferring protected characteristics like ethnicity or sex.
FTC AI Actions
FTC applies Section 5 authority against unfair/deceptive AI practices, plus AI-specific rules including the Fake Reviews Rule (Oct 2024) prohibiting AI-generated fake reviews.