No. Doxxing is illegal in Brazil under multiple statutes, including the Marco Civil da Internet (Law No. 12.965/2014) and the General Data Protection Law (LGPD, Law No. 13.709/2018). Unauthorized disclosure of personal data may trigger civil liabilities, fines up to 2% of a company’s revenue, or criminal penalties under Articles 153 and 154-A of the Penal Code. The 2026 Compliance Adjustments to the LGPD further tighten enforcement, requiring data controllers to implement stricter anonymization protocols for public disclosures.
Key Regulations for Doxxing in Brazil
- Marco Civil da Internet (Law No. 12.965/2014): Prohibits the non-consensual sharing of personal data online, with ISPs and platforms liable for failing to remove content upon judicial order.
- LGPD (Law No. 13.709/2018): Classifies doxxing as a violation of data subject rights, mandating fines for controllers who fail to protect identifiable information under Article 46.
- Penal Code (Articles 153, 154-A): Criminalizes the dissemination of private data with intent to harm, punishable by imprisonment (3 months to 2 years) or community service, escalating under aggravating circumstances (e.g., targeting minors or public officials).
Enforcement is overseen by the National Data Protection Authority (ANPD), which has issued 2025 guidance clarifying that even anonymized data may constitute doxxing if re-identification risks are foreseeable. Courts increasingly apply in solidum liability, holding platforms jointly accountable for user-generated doxxing content unless proactive moderation measures are demonstrated.