FELCA Law Brazil 2026: What It Is, Who It Affects, and How to Comply
Brazil's Digital ECA (Law 15.211/2025) — known as the FELCA Law — is now in force as of March 17, 2026. Any platform that could be accessed by minors in Brazil must implement reliable age verification. Self-declaration is banned. Fines reach BRL 50 million per violation.
Brazil's Digital ECA requires all platforms accessible to minors to implement reliable age verification — self-declaration is no longer accepted.
IN EFFECT — MARCH 17, 2026
Platforms not in compliance are subject to immediate ANPD enforcement
Fines up to BRL 50M · 10% of Brazil revenue · Service suspension · Permanent ban
What Is the FELCA Law?
The FELCA Law is the popular name for Law 15.211/2025, formally called the Estatuto Digital da Criança e do Adolescente (Digital Child and Adolescent Statute, or Digital ECA). It was signed by President Lula in September 2025 and took effect six months later on March 17, 2026.
The name comes from a Brazilian influencer known as "Felca" (Felipe Bressanim Pereira), whose viral video exposing child exploitation on digital platforms sparked widespread public pressure and accelerated the law's passage through Congress.
The law also upgraded the ANPD (Brazil's data protection authority) into an independent regulatory agency, giving it expanded powers to investigate, fine, and suspend platforms — similar to the role of the FTC in the US or the ICO in the UK.
Who Must Comply — And Does It Apply to Foreign Companies?
The Digital ECA applies to any digital service "directed at or likely to be accessed by" children or adolescents in Brazil — regardless of where the company is based. In practice, this covers:
Online Games
Mobile, PC and browser games — especially those with loot boxes, purchases, or 16+/18+ content.
Sports Betting & Gambling
All licensed Brazilian betting platforms and online casinos. Double compliance: Digital ECA + Law 14.790/2023.
Social Media & Apps
Any platform with user-generated content accessible by minors. Accounts under 16 must be linked to a guardian.
Streaming Services
Video and entertainment platforms with adult content ratings. Age gates required on restricted content.
Adult Content Platforms
Robust age verification required at every access attempt — not just at registration.
E-commerce
Marketplaces and delivery apps selling alcohol, tobacco, or other age-restricted products.
Important for international companies
Brazil is the largest digital market in Latin America, with 160+ million internet users. If your platform is available in Portuguese or has significant Brazilian traffic, you are subject to the Digital ECA — even if you operate from the US, EU, or anywhere else. ANPD can block access to non-compliant services within Brazil.
What the Law Requires — and What Is Banned
❌ Banned from March 17, 2026
- → "I confirm I am 18+" checkbox
- → Unvalidated date-of-birth fields
- → Self-declaration of any kind
- → Creating minor accounts without guardian linkage
- → Behavioral profiling or emotional targeting of minors
- → Loot boxes and paid random rewards for minors
✅ Accepted Verification Methods
- → CPF-based age check (Brazil tax ID → date of birth)
- → Facial biometrics with liveness detection
- → Government document upload and validation
- → Age signals from app stores via API
- → Third-party certified verification providers
Penalties for Non-Compliance
| Penalty | Details |
|---|---|
| Formal warning | First-level penalty; platform must remediate within defined period |
| Fine | Up to BRL 50 million OR 10% of Brazil annual revenue — whichever is greater |
| Service suspension | ANPD can suspend the platform's operation in Brazil |
| Permanent ban | For repeat or severe violations — complete prohibition to operate in Brazil |
The Simplest Path to Compliance: CPF-Based Age Verification
Brazil's CPF (Cadastro de Pessoas Físicas) is a national taxpayer ID issued to every Brazilian citizen, containing their date of birth in the official Receita Federal database. This makes CPF verification the most efficient compliant mechanism available — it requires no document upload, no facial scan (though that can be added), and returns an age confirmation in under 2 seconds.
User enters CPF at sign-up
Your platform collects the CPF number during registration — one additional field.
API call to FlagCheck
A single POST request sends the CPF to the FlagCheck Age Verification API.
Instant age confirmation
JSON response: is_adult: true/false. Block or allow access accordingly. Compliance logged.
FELCA Law in effect — March 17, 2026
Get Your Platform Compliant Today
FlagCheck provides the FELCA Age Check API (CPF → is_adult in under 2s) and FELCA Selfie API (face liveness). Brazilian-native, LGPD-compliant, production-ready.
FELCA Age Check
CPF → is_adult in < 2s
FELCA Selfie
Face liveness + biometrics
LGPD Compliant
No CPF stored · Auditable
Frequently Asked Questions
What is the FELCA Law in Brazil?▼
Does the FELCA Law apply to international companies?▼
When did the FELCA Law take effect?▼
What does "reliable age verification" mean under the FELCA Law?▼
What are the penalties for non-compliance?▼
Who enforces the FELCA Law?▼
Does Apple's age verification API satisfy the FELCA Law?▼
What is the easiest way to comply with the FELCA Law?▼
FELCA Law Brazil Complete Guide
Brazil Digital ECA age verification mandatory compliance 2026. Law 15211 2025 international companies. ANPD enforcement Brazil. CPF age check API. Brazilan child protection online law. Age gate Brazil platforms. Digital ECA scope penalties compliance guide English.