ORBIS Compliance

Anatel Endorses Cybersecurity Regulation Amendments for Telecom Providers

Published /Brazil

Cybersecurity Regulation Amendments Endorsed by Anatel

On July 4th, Anatel endorsed a proposal to amend cybersecurity regulations (Resolution No. 740, December 21st, 2020) impacting all providers of telecommunications services of public interest, irrespective of size. The amendment mandates compliance with Article 8, aimed at fortifying consumer equipment against vulnerabilities.

Significantly, Article 2-B extends regulatory oversight to include submarine cable operators with international connections, proprietary mobile service providers, and network operators in the wholesale market. This expansion reflects the critical nature of their services and infrastructures.

Additionally, these entities are now integrated into GT-Ciber, a cybersecurity working group. Provisions allowing telecom suppliers to engage startups exempt from specific cybersecurity mandates, provided compliance with regulatory norms, foster innovation and experimentation.

The proposal aligns Brazilian practices with international standards, addressing asymmetries among providers and updating cybersecurity policy regulations. This amendment supports Decree No. 11,738 (October 18th, 2023), establishing the Program to Strengthen Institutional Capacity for Regulatory Management (PRO-REG), and advances the Sustainable Development Goals of the UN Agenda 2030.

Regulatory Impact

  • Top Priority: Yes
  • Type of Certificate: No
  • Spectrum Bands: No
  • Import Changes HS Code: No
  • Standard Changes: Yes
  • Product Changes: Yes
  • Label Changes: No

Link to Source - https://www.gov.br/anatel/pt-br/assuntos/noticias/conselho-diretor-aprova-proposta-de-alteracao-do-regulamento-de-seguranca-cibernetica-aplicada-ao-setor-de-telecomunicacoes

Regulatory Impact

Impact TypeStatus
Top Priority
Type Certificate
Spectrum Bands
Import Changes (HS Codes)
Standard Changes
Product Changes
Label Changes

Brazil Quick Facts

Regulatory AgencyANATEL (Agência Nacional de Telecomunicações)
Certification TypeMandatory
License ValidityTechnical compliance certificate: 2 to 3 years
Application LanguagePortuguese
Legal License HolderRequired
In-country Testing RequirementRequires testing

Talk to our Experts

Let us clarify how this news impacts you. Fill the form below and we will get back to you within 24 hours.

Gain comprehensive insights and the latest regulatory updates from around the globe with ORBIS Compliance's product certification management resources. Discover how to utilize these tools by completing our brief contact form for more information.