Brazil AI Framework

Brazil

v2024

7 domains

29 controls

Brazilian AI regulatory framework

Verified

Brazil AI Framework is a compliance framework from Brazil with 7 domains and 29 controls that map to 14 other frameworks. The largest domains are Brazil AI (PL 2338/2023) Cap. II: Rights of Affected Persons (5 controls), Brazil AI (PL 2338/2023) Cap. III: Risk Categorization of AI Systems (5 controls), Brazil AI (PL 2338/2023) Cap. IV: Governance of AI Systems (5 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (7)

Brazil AI (PL 2338/2023) Cap. I: Preliminary Provisions

4 controls

Controls in the Brazil AI (PL 2338/2023) Cap. I: Preliminary Provisions domain of Brazil AI Framework — 3 controls
Code	Title	Description
BRAI-A1	Scope and general national norms	Scope. Article 1 establishes general national norms for the development, implementation and responsible use of artificia...
BRAI-A2	Foundations	Foundations. Article 2 sets the foundations of AI regulation, including human dignity, autonomy, privacy and data protec...
BRAI-A3	Principles	Principles. Article 3 sets the principles governing AI: non-discrimination, transparency, explainability, auditability,...

Brazil AI (PL 2338/2023) Cap. II: Rights of Affected Persons

5 controls

Controls in the Brazil AI (PL 2338/2023) Cap. II: Rights of Affected Persons domain of Brazil AI Framework — 5 controls
Code	Title	Description
BRAI-A12	Right to non-discrimination	Right to non-discrimination. Article 12 gives affected persons the right to non-discrimination and to the correction of...
BRAI-A5	Rights of affected persons	Rights of affected persons. Article 5 establishes the rights of persons affected by AI systems, including the right to i...
BRAI-A7	Right to prior information about AI interaction	Right to information. Article 7 gives affected persons the right to know, prior to or at the time of interaction, that t...
BRAI-A8	Right to explanation of AI decisions	Right to explanation. Article 8 gives affected persons the right to an explanation about decisions, recommendations or p...
BRAI-A9	Right to contest and to human review	Right to contest. Article 9 gives affected persons the right to contest AI decisions and to request human review of deci...

Brazil AI (PL 2338/2023) Cap. III: Risk Categorization of AI Systems

5 controls

Controls in the Brazil AI (PL 2338/2023) Cap. III: Risk Categorization of AI Systems domain of Brazil AI Framework — 5 controls
Code	Title	Description
BRAI-A13	Preliminary risk assessment	Preliminary assessment. Article 13 requires AI agents to perform a preliminary assessment to classify the risk of an AI...
BRAI-A14	Excessive-risk (prohibited) AI systems	Excessive-risk AI. Article 14 prohibits the implementation and use of AI systems posing excessive risk, including sublim...
BRAI-A15	Biometric identification in public security	Biometric identification. Article 15 restricts the use of remote biometric identification systems in publicly accessible...
BRAI-A17	High-risk AI systems	High-risk AI. Article 17 designates the categories of high-risk AI systems (e.g. critical infrastructure, education, emp...
BRAI-A18	Updating the high-risk list	Updating the high-risk list. Article 18 empowers the competent authority to update the list of high-risk AI systems, req...

Brazil AI (PL 2338/2023) Cap. IV: Governance of AI Systems

5 controls

Controls in the Brazil AI (PL 2338/2023) Cap. IV: Governance of AI Systems domain of Brazil AI Framework — 5 controls
Code	Title	Description
BRAI-A19	Governance measures for AI agents	Governance measures. Article 19 requires AI agents to establish governance structures and internal processes to ensure s...
BRAI-A20	Additional governance for high-risk AI	High-risk governance. Article 20 imposes additional governance measures for high-risk AI, including documentation, testi...
BRAI-A22	Algorithmic impact assessment	Algorithmic impact assessment (AIA). Article 22 requires an algorithmic impact assessment for high-risk AI systems, eval...
BRAI-A24	AIA methodology	AIA methodology. Article 24 sets out the minimum content and methodology of the algorithmic impact assessment.
BRAI-A26	Publicity of AIA conclusions	Publicity of the AIA. Article 26 requires publication of the conclusions of the algorithmic impact assessment, protectin...

Brazil AI (PL 2338/2023) Cap. V: Civil Liability

2 controls

Controls in the Brazil AI (PL 2338/2023) Cap. V: Civil Liability domain of Brazil AI Framework — 2 controls
Code	Title	Description
BRAI-A27	Civil liability of AI agents	Civil liability. Article 27 establishes the civil liability of providers and operators of AI systems for patrimonial, mo...
BRAI-A29	Liability allocation between agents	Liability allocation. Article 29 sets out how civil liability is allocated among the AI agents in the value chain.

Brazil AI (PL 2338/2023) Cap. VI-VII: Incident Communication and Supervision

3 controls

Controls in the Brazil AI (PL 2338/2023) Cap. VI-VII: Incident Communication and Supervision domain of Brazil AI Framework — 3 controls
Code	Title	Description
BRAI-A31	Communication of serious security incidents	Incident communication. Article 31 requires AI agents to communicate serious security incidents to the competent authori...
BRAI-A33	Competent authority (central body)	Competent authority. Article 33 designates the competent authority as the central body for applying the law and issuing...
BRAI-A36	Administrative sanctions	Administrative sanctions. Article 36 sets out the administrative sanctions for infractions of the law (warnings, fines,...

Brazil AI (PL 2338/2023) Cap. VIII-IX: Codes, Sandbox and Final Provisions

5 controls

Controls in the Brazil AI (PL 2338/2023) Cap. VIII-IX: Codes, Sandbox and Final Provisions domain of Brazil AI Framework — 5 controls
Code	Title	Description
BRAI-A37	Codes of good practice and governance	Codes of good practice. Article 37 enables AI agents to adopt codes of good practice and governance, and the authority t...
BRAI-A38	Regulatory sandbox	Regulatory sandbox. Article 38 empowers the authority to authorise experimental regulatory environments (sandboxes) for...
BRAI-A42	Text and data mining / copyright	Copyright and TDM. Article 42 provides that the automated use of works for text and data mining by research and other en...
BRAI-A43	AI incident database	Incident database. Article 43 tasks the authority with creating and maintaining a database of AI incidents, to which age...
BRAI-A45	Entry into force	Entry into force. Article 45 provides that the law enters into force one year after its publication, requiring a transit...

Your Compliance Coverage

If you comply with Brazil AI Framework, you already cover:

OECD AI Principles

32%

9 controls mapped

Compare →

ISO 45001:2018

1 controls mapped

Compare →

ISO 22301:2019

1 controls mapped

Compare →

+ 11 more: ISO 22000:2018 (4%), ISO 37301:2021 (4%)

See all 14 mapped frameworks ↓

Maps to 14 other frameworks

28 total controls

OECD AI Principles

9 source controls mapped|6 target controls covered

32%

ISO 45001:2018