Brazil is about to pass one of the most sweeping internet censorship laws in Latin America, and it’s being sold as a child protection measure.

This week marked a turning point for digital rights in Brazil. The Chamber of Deputies advanced Bill PL 2628/2022 using an “urgency” motion with no roll-call vote, bypassing committee debate entirely. The public didn’t see it. The press barely noticed. It passed by symbolic vote, meaning nobody had to put their name on it.

The speed and secrecy surrounding this legislation should alarm anyone who values internet freedom. What’s happening in Brazil isn’t just about child safety—it’s a blueprint for how governments worldwide are using legitimate concerns about protecting minors to establish comprehensive digital surveillance and censorship systems.

The Stealth Passage

On August 19, 2025, Chamber President Hugo Motta approved an urgency request for PL 2628/2022, cutting off critical steps in the legislative process. The bill reached the full floor for a vote just one day later, on August 20. The urgency motion (Requerimento de UrgĂȘncia REQ 1785/2025) passed without a roll-call vote through a symbolic vote—a method that records no individual positions and relies entirely on the presiding officer’s perception of consensus.

This procedural maneuvering drew sharp condemnation from lawmakers who argued the process ignored legislative rules. Congressman Marcel van Hattem (NOVO-RS) accused the Chamber’s leadership of bypassing democratic norms, stating that Motta approved the urgency request to expand the “censorship” of the Lula government. Congressman Mario Frias (PL-SP) criticized the move more bluntly: “Hugo Motta emptied the plenary and, in cowardice, approved ‘symbolically’ a project they say is to protect children, but which is actually censorship.”

Brazil’s Legal Battle with X: Free Speech and Compliance

The catalyst for this rushed process was a series of viral videos by social media influencer Felca, exposing what he called the “adultization” of children online. While these concerns about child exploitation are legitimate and deserve attention, they provided the political cover needed to fast-track a bill with far broader implications than child protection.

Beyond Child Protection: The Surveillance Infrastructure

PL 2628/2022, originally authored by Senator Alessandro Vieira, goes far beyond protecting children. The bill establishes mandatory rules for all digital platforms operating in Brazil, creating a comprehensive regulatory framework that includes:

Mandatory Age and Identity Verification: Under Article 24-A, platforms must implement mechanisms to actively prevent underage access, which can include biometric age verification technologies. This requirement effectively ends online anonymity, as all users—not just children—must prove their identity to access digital services.

Content Takedown Powers: The legislation grants a newly created federal oversight authority sweeping powers to enforce regulations, issue sanctions, and even suspend platforms for up to 30 days in some circumstances, potentially without a full court decision. This creates a rapid censorship mechanism that could easily be weaponized against dissenting voices.

Broad Content Restrictions: While framed as protecting children, the bill’s definition of “harmful content” includes vaguely worded provisions that could encompass legitimate political speech, journalistic reporting, and public debate on controversial topics.

Data Collection Requirements: Platforms must collect and retain user identification data, creating massive databases of personal information that become targets for government surveillance and corporate exploitation.

The UK Model: A Warning from Across the Atlantic

Brazil’s approach closely mirrors the UK’s Online Safety Act, which gave broad powers to regulators, required platforms to enforce age verification, and demanded fast takedowns of content labeled as harmful. The British law faced fierce criticism from free speech advocates, tech experts, privacy campaigners, and even members of Parliament who warned it would do far more than protect minors.

Critics of the UK law argued it blurred the line between illegal and “legal but harmful” content, allowing the state to pressure platforms into removing lawful speech based on vague or politically influenced definitions. The result, many warned, would be a chilling effect across the internet, particularly around sensitive subjects such as politics, gender, and health.

The surveillance implications of mandatory age verification were equally concerning, as these systems often require biometric data or government ID, effectively ending online anonymity for millions of users. France’s data protection authority found that no current age verification method adequately balances “sufficiently reliable verification, complete coverage of the population, and respect for the protection of individuals’ data and privacy and their security.”

The Rise and Fall of USDoD: The Brazilian Hacker Who Shook the World

The Digital ID Connection

Brazil’s push for age verification comes at a particularly concerning time, given the country’s ongoing development of digital identity systems. The nation has been building a comprehensive biometric database through its electoral system and has plans for a unified National Civil Identification (ICN) system that would consolidate all citizen data into a single digital identity.

The timing isn’t coincidental. Age verification requirements create the perfect justification for mandatory digital identity systems. When platforms must verify the age of every user, the logical next step is a government-issued digital ID that serves as the universal gateway to internet access.

This creates a surveillance infrastructure that would have been unthinkable just a decade ago. Every click, every search, every social media post becomes tied to a verified government identity. The anonymous internet—long a refuge for dissidents, whistleblowers, and marginalized communities—disappears.

A Pattern of Authoritarian Escalation

Brazil’s digital rights landscape has deteriorated significantly under increasing government pressure. Recent examples include:

  • Social Media Censorship: Brazilian courts have ordered the blocking of numerous social media accounts and posts with little transparency or opportunity for appeal.- Platform Intimidation: In May 2023, Supreme Court Justice Alexandre de Moraes ordered the removal of all ads from companies opposing Brazil’s fake news bill, including Google, Meta, and Spotify, threatening fines of R$150,000 per hour.- X/Twitter Ban: Brazil suspended access to X (formerly Twitter) after owner Elon Musk refused to comply with content removal orders and appoint a legal representative in the country, demonstrating the government’s willingness to ban entire platforms.

The PL 2628/2022 represents an escalation of these trends, codifying into law the government’s power to control online speech under the guise of child protection.

The Privacy Paradox

One of the most troubling aspects of age verification mandates is how they undermine the very privacy they claim to protect. Children’s privacy advocates have long argued that comprehensive data collection about minors creates more risks than it solves.

The bill requires platforms to collect and verify identity information from all users, creating vast databases of personal data that become targets for hackers, authoritarian governments, and commercial exploitation. Children’s data, in particular, becomes permanently tied to their government identity from their first online interaction.

Moreover, surveillance technologies deployed in the name of child protection often end up being used against vulnerable populations. Domestic violence survivors, political dissidents, and marginalized communities rely on online anonymity for safety. Mandatory identity verification systems strip away these protections.

Mexico’s Biometric Dystopia: The Mandatory Digital ID That Signals the End of Privacy in Latin America

International Implications

Brazil’s actions are part of a global trend toward internet regulation disguised as child protection. Australia recently passed legislation banning children under 16 from social media platforms. The European Union is developing its own age verification requirements. The United States continues to debate various age verification mandates at both state and federal levels.

These efforts share common characteristics: they bypass normal legislative processes by invoking child safety, they create infrastructure that enables mass surveillance, and they fundamentally alter the relationship between citizens and the internet.

Brazil’s approach is particularly concerning because it provides a playbook for other countries seeking to implement digital censorship. The use of “urgency” procedures to avoid debate, the symbolic voting that prevents individual accountability, and the framing of surveillance as child protection all offer lessons for authoritarian-minded governments worldwide.

As Vulnerabilidades Cibernéticas do Brasil: Um Olhar Essencial para a Conformidade

What’s at Stake

The implications of PL 2628/2022 extend far beyond Brazil’s borders. As Latin America’s largest democracy, Brazil’s actions influence regional and global internet governance norms. If Brazil successfully implements comprehensive age verification and content control systems, other countries will likely follow suit.

The bill threatens several fundamental principles:

Online Anonymity: The right to communicate without revealing one’s identity has been essential for political dissidents, journalists, and marginalized communities. Mandatory age verification eliminates this protection.

Free Expression: Vague content restrictions and rapid takedown procedures create powerful tools for censoring legitimate speech that challenges government positions or corporate interests.

Privacy: Mass data collection requirements turn internet platforms into surveillance systems, fundamentally altering the relationship between users and digital services.

Democratic Debate: By making it easier to remove controversial content and harder to speak anonymously, the bill threatens the open discourse essential to democratic governance.

Ciberseguridad en América Latina: Navegando el Desafío en la Región Mås Vulnerable

Resistance and Opposition

Despite government claims of broad support, the bill faces significant opposition. Congressman Nikolas Ferreira (PL-MG) criticized the procedural abuse, stating: “I do not believe that this is a position that the President should adopt in this House.” Mauricio Marcon (Podemos-RS) warned that “the government uses children and adolescents as a shield to censor social networks.”

Digital rights organizations have also raised concerns about the bill’s potential for mission creep. The Electronic Frontier Foundation and other privacy advocates have documented how age verification systems inevitably become surveillance systems, used for purposes far beyond their stated goals.

However, resistance faces significant challenges. The framing of opposition as being “against child protection” makes it politically difficult to criticize the bill’s broader implications. This rhetorical strategy effectively silences debate about the surveillance and censorship infrastructure being created.

The Path Forward

The bill’s passage in the Chamber of Deputies doesn’t end the legislative process. Since the Chamber made changes to the Senate-approved version, the bill must return to the Senate for final approval. This provides a crucial opportunity for more thorough debate and potential modifications.

Digital rights advocates, privacy organizations, and civil society groups have a narrow window to raise awareness about the bill’s broader implications beyond child protection. Key areas for opposition include:

Procedural Challenges: Questioning whether the urgency procedures were properly followed and whether symbolic voting on such significant legislation violates democratic norms.

Technical Analysis: Demonstrating that age verification technologies are ineffective at protecting children while creating serious privacy and security risks for all users.

Alternatives: Proposing less invasive approaches to child protection that don’t require comprehensive surveillance infrastructure.

International Pressure: Highlighting how Brazil’s actions contribute to global trends toward digital authoritarianism and threaten international internet freedom.

Navigating the Digital Frontier: Cybersecurity and Data Protection in Latin America

Conclusion: A Critical Moment

Brazil’s PL 2628/2022 represents a critical moment in the global struggle over internet freedom. While legitimate concerns about protecting children online deserve serious attention, this bill uses those concerns to justify a comprehensive surveillance and censorship system that threatens fundamental digital rights.

The speed and secrecy of the bill’s passage reveal its true nature. Legislation genuinely focused on child protection would benefit from open debate, expert input, and careful consideration of privacy implications. Instead, Brazilian lawmakers used procedural tricks to avoid accountability while building the infrastructure for digital authoritarianism.

The international community must recognize that what happens in Brazil won’t stay in Brazil. The precedents being set—using child safety to justify mass surveillance, bypassing democratic processes through “urgency” procedures, and framing surveillance as protection—will be copied by authoritarian governments worldwide.

The fight against PL 2628/2022 is ultimately a fight for the future of the internet. Will it remain a space for free expression, anonymous communication, and democratic debate? Or will it become a surveilled and controlled environment where government approval is required for digital participation?

Brazil’s answer to these questions will resonate far beyond its borders, potentially shaping internet governance for decades to come. The stakes couldn’t be higher, and the window for effective opposition is rapidly closing.


This article is based on research into Brazil’s PL 2628/2022, its legislative history, and international trends in internet regulation. While the bill’s proponents frame it as child protection legislation, its broader implications for surveillance, censorship, and digital rights deserve careful scrutiny from anyone concerned about the future of internet freedom.