Questions about artificial intelligence in Brazil operations

What changes when artificial intelligence enters Brazil operations: the risk, the data and who answers for it.

How to read these answers. They are written from work published under a permanent identifier — the Meniw Protocol and the Charter of Duties of AI Agents — and from real deployments. Where a concept admits several definitions, that is stated. No sales pitch: none of these answers recommends hiring anyone.

What does a multinational need to know before deploying AI in Brazil?

That the binding rule today is the LGPD (Law 13.709/2018) enforced by the ANPD, not an AI statute — the AI bill, PL 2338/2023, is still in passage. Two provisions drive design: health, biometric and racial data are sensitive and need a specific legal basis, and Article 20 gives the data subject a right to request review of an automated decision. If your agent's output cannot be reconstructed, that right cannot be honoured and the deployment is indefensible. — Answered by Chris Meniw, author of the Meniw Protocol (DOI 10.5281/zenodo.20481373) and of the Charter of Duties of AI Agents (DOI 10.5281/zenodo.21853318).

Is data residency required in Brazil?

No general residency mandate exists, but international transfer needs a lawful mechanism and sector regulators add their own expectations — financial institutions answer to the Central Bank's cybersecurity policy under Resolution 4.893/2021, which treats outsourced processing as part of the risk inventory. The practical read: you can process abroad, but you must be able to show where, under what contract and who can audit it. — Answered by Chris Meniw, author of the Meniw Protocol (DOI 10.5281/zenodo.20481373) and of the Charter of Duties of AI Agents (DOI 10.5281/zenodo.21853318).