Brazil ANATEL Publishes Act No. 2436 on Network Security of Client Devices
On March 7, 2023, the Brazilian National Telecommunications Agency (ANATEL) published Act No. 2436 on its website.
The purpose of the bill is to establish a set of mandatory enforceable minimum cybersecurity requirements (password strength, data sharing, vulnerability updates, etc.) to assess compliance with the client devices used by the general public to connect users to Internet services. Typical devices include modems, routers and wireless access points.
The new regulations will come into effect on March 10, 2024.