Autoridade Nacional de Proteção de Dados

The Agência Nacional de Proteção de Dados is Brazil's national personal-data regulator. It retains the acronym ANPD and was formerly called the Autoridade Nacional de Proteção de Dados. Law 15.352/2026 constituted it as a federal regulatory agency linked to the Ministry of Justice and Public Security. The ANPD oversees the Lei Geral de Proteção de Dados, issues rules and guidance, handles complaints, and may investigate and sanction breaches.

Its inspection Arm receives reports of security incidents that may create a relevant risk or harm. A notification gives the regulator information to assess an incident and the organisation's response. It does not itself establish that personal data was misused, publicly disclosed or even accessed. This distinction matters because an organisation may notify the ANPD while an investigation is still determining which systems or records were affected. The authority's role is to enforce Brazil's data-protection law and supervise the response, rather than to confirm every early claim made by a reporting organisation.