Lula’s Sanction of the Digital ECA: A Recipe for Censorship, Economic Damage, and State Overreach
By Hotspotnews
President Luiz Inácio Lula da Silva’s quick sanctioning of Law No. 15.211/2025—the so-called Digital ECA—on September 17, 2025, was sold as urgent child protection in response to viral outrage over exploitative content. But the reality is far uglier: this rushed, heavy-handed legislation hands sweeping new powers to regulators, threatens the livelihoods of tech companies, risks massive over-censorship, and creates privacy headaches while doing little to truly safeguard kids. Lula could have vetoed or demanded revisions; instead, he rubber-stamped a law that prioritizes control over common sense.
The enforcement teeth are vicious and disproportionate. The National Data Protection Authority (ANPD), freshly empowered as an autonomous agency via Lula’s own decrees and provisional measures, can now slap fines up to 10% of a company’s revenue in Brazil (or R$50 million per violation), issue warnings with short correction deadlines, temporarily suspend operations, or outright ban platforms from the country through judicial blocking orders coordinated with telecom regulators. These aren’t gentle nudges—they’re existential threats. Global giants might absorb the hits, but Brazilian startups and smaller apps? They’ll fold under compliance costs or flee the market, killing innovation and reducing choices for users in one of the world’s biggest digital economies.
Vague obligations invite abuse and overreach. Platforms must implement “age verification” (often requiring invasive ID or biometrics), provide “parental supervision tools,” set privacy-maximizing defaults, ban targeted ads and emotional profiling for minors, prohibit infinite scrolling or autoplay in some cases, and monitor/report harmful content like grooming or sexualized material. While protecting kids from real dangers is essential, these broad mandates encourage platforms to over-remove content preemptively to dodge penalties—silencing legitimate speech on topics like mental health, sex education, politics, or activism that teens engage with. In Brazil’s already tense environment of judicial content orders and political polarization, this setup could easily morph into a tool for suppressing dissent under the guise of “child safety.”
Privacy ironies abound. The law claims to build on the LGPD (Brazil’s data protection framework), yet it forces more data collection for age checks, parental controls, and monitoring—heightening breach risks and potential government access. Requiring “real” age verification (no more self-declaration for restricted content) means platforms harvest sensitive documents or facial data, creating honeypots for hackers or state surveillance. Far from reducing harms, this could amplify them while shifting blame from under-resourced families and schools to private companies.
Lula’s embrace of this top-down approach ignores better paths: robust digital literacy campaigns, stronger enforcement of existing child exploitation laws, international cooperation on cross-border grooming, or incentives for voluntary industry tools. Instead, the Digital ECA—rushed through Congress in weeks amid public pressure—expands state authority at the expense of free expression, economic vitality, and practical protection. It risks isolating Brazil from global tech ecosystems, deterring investment, and burdening businesses without evidence it’ll meaningfully curb online dangers.
By signing without meaningful vetoes (only minor ones on unrelated points like Anatel powers), Lula has endorsed a flawed, punitive model that feels more like digital authoritarianism than genuine care for children. Brazil’s kids deserve real safeguards—not a law that weaponizes regulation against the open internet while expanding bureaucratic control. This isn’t progress; it’s a dangerous misstep.