Phosra
Get Started
BrazilLGPD enacted (2018); Digital ECA passed Senate (2024)

Brazil LGPD Child Provisions + Digital ECA (BR LGPD)

Brazil's data protection law includes specific child provisions banning targeted advertising to minors, supplemented by the Digital ECA bill strengthening children's digital rights.

Compliance Coverage7/7

What BR LGPD Requires

Key provisions of Brazil LGPD Child Provisions + Digital ECA

Best Interest of the Child

All processing of children's and adolescents' personal data must be carried out in their best interest. This overriding principle guides all data protection decisions involving minors.

Parental Consent for Data Processing

Processing personal data of children and adolescents requires specific, highlighted consent from at least one parent or legal guardian. Consent must be informed and freely given.

Ban on Targeted Advertising to Children

Targeted advertising directed at children is prohibited under the LGPD's best-interest framework. Platforms may not use children's data for behavioral advertising or ad profiling.

Right to Data Deletion

Children, adolescents, and their legal guardians have the right to request deletion of personal data collected by data controllers. Requests must be honored in a timely manner.

Digital ECA Platform Duties

The Digital ECA (Estatuto da Criança e do Adolescente) establishes additional platform duties for child safety online, including content moderation obligations and age verification requirements.

ANPD Enforcement

The National Data Protection Authority (ANPD) enforces LGPD provisions, with enhanced scrutiny for violations involving children's data. Administrative sanctions include fines and data processing suspensions.

How Phosra Helps

BR LGPD provisions mapped to Phosra features

Each BR LGPD requirement is addressed by a specific Phosra capability. Integrate once, and your platform is covered.

Ban on targeted advertising

Targeted Ad Block

targeted_ad_block

The targeted_ad_block rule disables all behavioral advertising for minor users across YouTube, Instagram, TikTok, and Roblox, satisfying the LGPD's advertising prohibition.

REST API — LGPD ad ban enforcement
bash
curl -X POST https://api.phosra.com/v1/enforcement \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "child_id": "ch_mateus_09",
    "rules": ["targeted_ad_block"],
    "platforms": ["youtube", "instagram",
                  "tiktok", "roblox"]
  }'

Data deletion rights

Data Deletion Request

data_deletion_request

The data_deletion_request rule triggers deletion workflows on connected platforms. Child profiles can be fully removed from Phosra via the dashboard or API.

REST API — LGPD data deletion
bash
curl -X POST https://api.phosra.com/v1/children/ch_mateus_09/data-deletion \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "scope": "all_platforms",
    "reason": "guardian_request",
    "include_phosra_profile": true
  }'

Privacy data sharing controls

Privacy Data Sharing

privacy_data_sharing

The privacy_data_sharing rule blocks third-party data sharing by default for child accounts, ensuring compliance with LGPD's data protection requirements.

REST API — LGPD data sharing controls
bash
curl -X POST https://api.phosra.com/v1/enforcement \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "child_id": "ch_mateus_09",
    "rules": ["privacy_data_sharing"],
    "platforms": ["youtube", "instagram",
                  "tiktok", "discord"]
  }'

Parental consent model

Parent Account Ownership

Phosra's parent-managed account model ensures all child profiles are created by a verified adult, satisfying LGPD's consent requirements.

REST API — LGPD parental consent
bash
curl -G https://api.phosra.com/v1/families/fam_4kL2m/consent-status \
  -H "Authorization: Bearer sk_live_..." \
  -d "regulation=lgpd"

Enforcement documentation

Compliance Audit Trail

Complete enforcement logging provides documentary evidence for ANPD reviews and demonstrates compliance with LGPD's best-interest principle.

REST API — ANPD compliance audit
bash
curl -G https://api.phosra.com/v1/enforcement/audit \
  -H "Authorization: Bearer sk_live_..." \
  -d "regulation=br_lgpd" \
  -d "format=anpd_report"

Coverage Assessment

BR LGPD compliance checklist

Compliance Coverage

Best interest of the child prioritizedAge-appropriate policy defaults across 40 categories
Parental consent obtainedParent account ownership verification
Targeted advertising blockedtargeted_ad_block rule category
Data deletion mechanism availabledata_deletion_request + profile deletion API
Third-party data sharing blockedprivacy_data_sharing defaults to blocked
Cross-platform enforcementPlatform adapters for YouTube, Instagram, TikTok, Roblox, Discord
ANPD compliance documentationEnforcement audit trail and compliance dashboard

Start building BR LGPD-compliant features today

Phosra handles the complexity of multi-platform compliance so you can focus on building great products for families.

Get Started FreeRead the Docs