Brazil: Legal Framework for Cybersecurity Bill (Bill No. 4752/2025) introduced to Senate

On 24 September 2025, the Legal Framework for Cybersecurity Bill (Bill No. 4752/2025) was introduced to the Federal Senate of Brazil. The Bill would establish a Legal Framework for Cybersecurity and creates a National Programme for Digital Security and Resilience for the public sector. Private or third-sector organisations may join the Programme through agreements. Participants would develop their own cybersecurity plans, which include incident response protocols and an inventory of critical assets. Entities that join the program would gain priority access to dedicated federal funding for cybersecurity projects and training. Furthermore, the framework would stipulate continuous monitoring and evaluation of the programme, with periodic publication of indicators and ensured civil society participation in assessments. The proposed law also details a national cybersecurity authority responsible for complementary regulation, supervision, and establishing minimum cybersecurity standards. It would also amend Law No. 13756/2018 to allocate at least 3% of the National Public Security Fund to cybersecurity initiatives, including technological modernisation, training, research, and support for sub-national entities.