BR LGPD Decreto 12.880/2026 Art. 47 - safety impact assessment and public summary

Where this comes from

Who it applies to

What engineering work it implies

Evidence an auditor expects

• Assessment documentDocument review

  Assess child-safety impacts and publish an accessible report summary — scoped assessment and minimized evidence

  Assess the actual supplier of an information-technology product/service directed to or likely accessed by children or adolescents under Decreto 12.880/2026 Article 47. Its stated supplier scope is not limited to the controller role in statutory Article 16 or automatically confined to the Article 31 million-user reporting threshold; preserve those source/scope distinctions for qualified review. Perform the Article 47 impact assessment of children's safety and health, including risk identification and analysis, likelihood of occurrence and severity of potential impact, risk treatment and mitigation, and continuous monitoring of the effectiveness of the adopted measures. A single high-level score or one-time privacy report is not evidence of every required element. Make a summarized version of the report public in clear and accessible language under Article 47 section 1. The public summary is distinct from the raw assessment report and underlying personal data; verify an accessible publication path and preserve the assessed scope, main risks, measures and material limitations without disclosing identifiable children or confidential raw case evidence. Article 47 section 2 permits ANPD rules on minimum content, frequency and preparation, review and sharing conditions. Verify current criteria; do not invent a universal numerical reassessment or publication interval. The decree commenced on 18 March 2026. Statutory Article 16 controller reports remain separately assessable from 17 March; this record does not establish blanket Article 39 or reporting-size relief. Use synthetic or sanitized assessment cases and minimized configuration, access, control and review evidence. Exclude real child identities, conversations, images, recordings, precise locations and raw personal-data reports from ordinary task attachments, exports and general logs. Keep any legally necessary sensitive operational material in a separately authorized, purpose-limited process with assessed access and retention. This is an engineering evidence-minimization safeguard, not a prescribed fixed log schema or retention period. Verify current ANPD implementing requirements and qualified Portuguese source review. Preserve the distinction between the decree's reference to children's safety/health and its supplier scope for products directed to or likely accessed by children or adolescents; assess actual age groups and unresolved source questions without inventing full-law or historical approval. The decree's cross-reference names statutory Article 31(VI), while the statute places impact-assessment methods/results in Article 31(VII). Preserve this primary-source cross-reference discrepancy for qualified review; it does not establish that the express Article 47 duties can be ignored.

Questions people ask

Does BR LGPD Decreto 12.880/2026 Art. 47 - safety impact assessment and public sum… apply to my service?

It applies when Brazil ECA Digital assessed fact Q_BR_ECA_CHILD_ACCESS: YES.

From when does this apply?

BR LGPD Decreto 12.880/2026 Art. 47 - safety impact assessment and public sum… applies from 18 March 2026. Its current status is: in force.

What evidence does an auditor expect?

Assess child-safety impacts and publish an accessible report summary — scoped assessment and minimized evidence.