Iubenda logo
Start generating


Table of Contents

Brazil Cookie Requirement Cheatsheet

The Brazilian data protection authority (ANPD) has published new guidance on cookies. In the table below we’ve highlighted some important aspects of the guidance. 

🔎 For a more in-depth review of the content in the table below see our Brazil: New Cook Requirements →

🇧🇷 Brazil
Is consent by scrolling valid?


Are explicit “accept” AND “reject” buttons required to be on the cookie notice?


The wording proposed by the Authority for this button is the following: “Reject cookies that are not necessary”.

Must accept and reject options be equally conspicuous (equal prominence requirement)


The accept button must be as prominent as the “Reject” button.

Is the prior blocking of cookies necessary where consent is required?

It has not been explicitly required by the Authority’s guidelines

Must cookies be listed one by one?


Cookies shall be listed by Category.

What should I include in the First Layer of my Cookie banner?

  1. A reject button; 
  2. An accept button;
  3. A management option (This third button shall redirect users to the second layer of the banner to allow the granular provision of consent on the basis of the categories of non-necessary cookies; and 
  4. A link for the exercise of rights. 

What should I include in the Second Layer of my Cookie banner?

  1. Categorization of cookies: display the cookies grouped per category. 
  2. Purposes of cookies: a simple, clear and precise description of the purposes for which the categories of cookies are installed is required.
  3. Browser settings: in the second layer of the banner and in the Privacy/Cookie Policy more in detail, information on how to manage cookie preferences through the browser or device settings shall be provided.

Must consent be granular on a per-purpose basis?


However, please note that the list of cookies presented for the collection of consent must not be too granular as this would lead to a hindrance for the users to express their will in a clear and positive manner.

Should withdrawing consent be as simple as giving it?


Users must be able to revoke the consent provided for the use of cookies at any time in a simplified and free-of-charge manner.

Is the use of a consent banner recommended?


Are strictly necessary cookies exempt from the consent requirement?


Do third parties have to be listed and identified?


Sharing of personal data with third parties must be provided in your cookie policy.

Are pre-ticked boxes allowed?


How iubenda can help you manage the new Cookie Requirements

It is simple to respect Brazil’s cookie requirements with iubenda. 

Simply begin generating, and depending on where you and your users are based, our configuration process will recommend the appropriate options, such as LGPD protection.

Additionally, our solution has a geo-location capability so that you can always show the appropriate notices and guidelines to the users you need to.

How to adopt the new cookie requirements?

We’ve created a checklist of the steps you must do to comply with Brazil’s latest cookie requirements for your convenience.