Brazil: Cybersecurity regulation in regulation on authorisation, penalties and fraud-prevention measures in Pix payment scheme

Progress

Current status

in grace period

30 Sep 2025 in grace period

26 Sep 2025 adopted

Scope

Implementers

Brazil

Policy Area

Data governance

Policy Instrument

Cybersecurity regulation

Regulated Economic Activity

digital payment provider (incl. cryptocurrencies)

Government Branch

executive

Government Body

central bank

Implementation Level

national

Timeline of events

30 Sep 2025

in grace period

Central Bank of Brazil regulation on authorisation, penalties and fraud-prevention measures in Pix payment scheme including cybersecurity regulation entered into force

On 30 September 2025, Central Bank of Brazil (BCB) Resolution No. 506 entered into force following its publication in the Official Gazette of the Union, introducing cybersecurity provisions in the Pix payment scheme. The resolution provides that Pix…

Source

Event type order

Action type in force with grace period

Government branch executive

Government body central bank

26 Sep 2025

adopted

Central Bank of Brazil adopted regulation on authorisation, penalties and fraud-prevention measures in Pix payment scheme including cybersecurity regulation

On 26 September 2025, the Central Bank of Brazil (BCB) adopted Resolution No. 506, amending Resolution No. 1 of 12 August 2020 to introduce cybersecurity provisions in the Pix payment scheme. The resolution establishes that Pix participants may only…

Source

Event type order

Action type adoption