Decree No. 8,771/2016, which regulates the Brazilian Civil Rights Framework for the Internet, entered into force on June 10. It contains provisions mainly on the following topics:

Network neutrality: the decree determined that discrimination or degradation of internet traffic are exceptional measures, which may only result from technical requirements necessary for the proper provision of services and applications, such as those related to network security (for example, restrictions on spams control of service denial attacks, and exceptional network congestion situations) or prioritized emergency services.
 
It also forbids the prioritization of third-party´s or the companies´ own data packages, to benefit both their own and third parties´ applications. Similarly, it prohibits actions that degrade or prevent the transmission of third parties´ data packages. This can affect business practices that have been frequently adopted on the market.
 
Personal Data Protection: in order to have access to users´ registration information, the competent administrative authorities must indicate the legal grounds and reasoning for requesting such access. Collective and generic requests without any specification on the relevant individuals and data are forbidden. In order to encourage transparency, authorities must publish annual statistical reports on data requests in the context of their activities.
 
The decree adopted the criterion of data minimization, which determines that providers must retain the least amount possible of personal data, private communications, and records of connection and access to applications, besides being forced to delete all such data as soon as the purpose of their use is satisfied or the storage legal term expires.
 
Safety Standards: providers have guidelines to follow, including access controls, authentication mechanisms and management protection measures, such as data encryption. Taking into account the technical complexity of this issue, as well as the fast evolution of solutions, the decree is correct in not setting specific standards.
 
Enforcement bodies: at last, the decree provides for the performance of supervision and infraction investigation activities by Anatel, Senacom, and the Brazilian Antitrust Authorities.