On 2 February 2026, the Bill (PL 98/2026) amending Law No. 15,211 concerning Electronic Games, including data protection regulation, was introduced in the Chamber of Deputies. The Bill mandates that digital platforms offering interactive virtual environments must process biometric and documentary data for age verification necessarily and proportionately, strictly adhering to Law No. 13,709/2018 (General Data Protection Law - LGPD). Article 21-A prohibits the processing of such sensitive data for purposes other than age verification and child protection. Platforms must adopt high standards of encryption and information security compatible with the state of the art to prevent unauthorised access or data exposure. The Bill requires that data be stored only for the shortest time necessary and expressly forbids sharing this information with third parties, except in cases involving court orders or criminal investigations. Potential penalties for failure to comply include warnings, fines based on global turnover, restriction of operations aimed at children, and compensation for collective moral damages to childhood. If the omission results in situations of grooming or exploitation, the platform's liability is aggravated. The Bill enters into force on the date of its publication.
Original source