evidoria

← Back to browse

Good practice Imported

ANPD's Regulatory Sandbox — Brazil's Supervised Testing Ground for AI and Data Protection Compliance

Brazil · Brasília · See the Brazil profile · See the Brasília profile

Evidence: Descriptive / self-reported Top 83% 40/100 · Ask Evidence Copilot about this practice

Brazil's data authority ANPD opened a regulatory sandbox in August 2025, letting three selected firms test AI systems under direct supervision. A four-month training phase ended in February 2026; testing now runs through December 2026 under the LGPD.

ANPD's Regulatory Sandbox — Brazil's Supervised Testing Ground for AI and Data Protection Compliance

Details

Maturity
Pilot
Promoter
Autoridade Nacional de Proteção de Dados (ANPD)
Period
Aug 2025 – Dec 2026
Keywords
data protection, AI regulation, regulatory sandbox, public administration

Context

Brazil's National Data Protection Authority (ANPD) opened a regulatory sandbox for AI and data protection, grounded in Article 20 of the LGPD, which gives individuals a right to review of automated decisions.

Objectives

The sandbox aims to promote algorithmic transparency and responsible innovation and to generate evidence on risks, best practices and governance gaps, without exempting participants from any LGPD obligation.

Activities

ANPD published a call for proposals on 19 August 2025 and selected three companies — Metatext Inteligência Artificial, Synapse Artificial Intelligence and IA Greenworld — with three more held in reserve. A mandatory 'leveling' phase standardised participants' technical, legal and regulatory understanding, concluding in February 2026, after which supervised testing began and is due to run through December 2026.

Conclusions

This is a small, first-of-its-kind pilot: only three companies are being tested, no outcome data exists yet, and its demonstrated value so far is procedural — a working sandbox mechanism now operating — rather than any measured reduction in AI-related harms or measured compliance gains.

Implementation
Indicative cost
Low (< €50k)
Time to results
Medium (1–3 years)
Staffing & skills
ANPD (Autoridade Nacional de Proteção de Dados) — direct regulator supervision

Conditions for success

  • Explicit legal basis (LGPD Article 20)
  • Formal public call for proposals with defined eligibility criteria
  • Mandatory 'leveling' phase to standardise participants' technical, legal and regulatory understanding

Common failure modes

  • Capped at three participants plus three reserves, with a fixed end date
  • No outcome data exists until the testing phase concludes
  • Participation does not exempt companies from any LGPD obligation

Where it fits

Governance type
national data-protection authority
Scale
small pilot cohort (3 companies)

Commonly funded by

National / regional programmes

Indicative funding routes for practices of this type — always check each programme's current calls and eligibility rules.

Do you run this practice? Claim it — verified implementers get a public contact pathway and can propose corrections.

Data sources

Where this practice's information was retrieved from, and when.

Attachments

Similar practices you may find useful