On 16 September 2026, the first anniversary of the ECA Digital's signing, Brazil's data protection authority (ANPD) stated that app stores and operating systems now carry a legal obligation to transmit age signals to app providers. The ANPD is monitoring Apple's App Store, Google Play and Microsoft Windows, with the checks due to finish by the end of 2026. The question for policymakers elsewhere is whether this is a workable model or a template for gatekeeper overreach.
The strongest case for the mandate
The case for putting the duty on the platform layer is serious. Today, every app and website must verify age separately. Each one collects its own selfies, documents or card details, which creates many small data stores about children and adults alike. A signal issued once by the operating system or store, and limited to an age range, could replace that. The ANPD has said the mechanism should estimate an age range without requiring documents or identification. Stores and operating systems also sit on the devices children use, and a small number of firms control them, so a single rule reaches a large share of the market. The ANPD makes this argument itself.
The legal basis is explicit. According to the ANPD, article 12, III of the ECA Digital requires these providers to make age signals available to services aimed at, or likely to be accessed by, children and adolescents. The ANPD also says the signals must travel through secure, privacy-protecting interfaces. The anniversary notice adds that self-declaration cannot be the only check for restricted content, so apps must use stronger age assurance.
Where the design is sound
The approach has three features that a pro-innovation view should welcome.
- Minimal data. An age bracket is far less invasive than government ID uploads to every app.
- Reuse over duplication. One signal can serve thousands of developers, including small ones that cannot afford their own verification stack.
- Process before penalty. The ANPD has said it is monitoring and issuing guidance rather than fining, and it cannot apply administrative sanctions until it updates its enforcement regulation.
Where the risk lies
The weak point is sequencing. Obligations already bind companies, yet two documents that define how those obligations are enforced are unfinished. The final age-assurance guidance is still pending after consultation on its preliminary version, and the sanctions-dosimetry regulation has no date. The consultation on the updated inspection and sanctioning process closes on 26 October 2026, and the ANPD says it may step up inspections in early 2027. In effect, Apple, Google and Microsoft are being measured against a standard whose penalty framework has not been settled.
That matters for innovation. A legally binding duty with an open-ended compliance definition pushes firms toward the most conservative reading. For a platform, the conservative reading can mean blocking features for all Brazilian users, or demanding more identity data than the signal approach was meant to avoid. Developers downstream face the same uncertainty. The ECA Digital applies to services aimed at, or likely to be accessed by, minors, and a vague 'likely to be accessed' test is hard for a small studio to apply with confidence.
There is also a gatekeeping concern. A mandate that makes two or three firms the age-verification layer for the whole app economy strengthens their position. Whatever rules emerge should be interoperable and should not let the platforms favour their own apps or charge developers for access to the signal. Brazil's competition authority, CADE, should be part of that conversation, not an afterthought.
The Discord case shows both the power and the risk
The ANPD's handling of Discord is the clearest preview of how it will act. On 12 August 2026 it ordered Discord to suspend its 'Go Live' feature and equivalent video-sharing features in Brazil. It cited article 6, II and III of the ECA Digital. It said the platform is not being blocked overall, and it set fines of up to R$50 million per infraction under article 35 if irregularities are confirmed. The suspension lasts until Discord shows adequate technical, security and governance measures, and any reactivation needs the ANPD's prior express authorisation. The ANPD says Discord appealed, and the suspension stays in place.
The agency's case is strong on its face: it cited robust evidence that the company had not taken reasonable steps to prevent serious harm to minors. Tech Policy Press reports that Discord's own report to the Ministry of Justice acknowledged that its safety systems failed in the case: the stream took about two hours to remove, and it initially scored 0.12 on a scale where 0.95 triggers action. The same report records the criticism that followed. Some politicians called the order censorship, and Data Privacy Brasil called it proportionate while warning of a chilling effect on end-to-end encryption.
A feature-level, time-limited, appealable measure is a more proportionate tool than a platform-wide block. But 'until the platform shows adequate safeguards' is an open-ended standard, and the ANPD decides when it is met. Open-ended discretion is manageable when it is paired with published criteria. That is what the unfinished guide and sanctions regulation are for.
What the ANPD should do before early 2027
- Publish the final age-assurance guide and the sanctions rules together, so that the duty and the penalty are defined in the same cycle and before enforcement intensifies.
- Set out a safe harbour. A firm that implements the signal as the guide describes should be treated as compliant.
- Limit the signal to an age range, and prohibit its use for advertising or profiling.
- Give reactivation conditions in writing. The Discord case should end with objective criteria that other platforms can read.
Brazil has chosen a design that is better for privacy than app-by-app ID checks. Whether it becomes a model depends on how fast the ANPD turns an immediate legal duty into predictable rules.