Published using Google Docs
Marco Civil - English Translation
Updated automatically every 5 minutes

MARCO CIVIL DA INTERNET

(Portuguese-English Mirrored Versions)[1]

 

MARCO CIVIL DA INTERNET

MARCO CIVIL DA INTERNET

 

(Unofficial English Translation)

Texto aprovado na Camara dos Deputados e em tramitacao no Senado Federal

Text approved in the House of Representatives and now on debate at Brazilian Senate

 recuperado de http://www.senado.gov.br/atividade/materia/detalhes.asp?p_cod_mate=116682

retrieved from http://www.senado.gov.br/atividade/materia/detalhes.asp?p_cod_mate=116682

Estabelece princípios, garantias, direitos e deveres para o uso da internet no Brasil.

Sets forth principles, guarantees, rights and obligations for the use of the Internet in Brazil.

O CONGRESSO NACIONAL decreta:

The National Congress decrees:

CAPÍTULO I

CHAPTER I

DISPOSIÇÕES PRELIMINARES

PRELIMINARY PROVISIONS

 

 

Art. 1º Esta Lei estabelece princípios, garantias, direitos e deveres para o uso da internet no Brasil e determina as diretrizes para atuação da União, dos Estados, do Distrito Federal e dos Municípios em relação à matéria.

Article 1. This Law sets forth principles, guarantees, rights and obligations for the use of the Internet in Brazil and determines guidelines for operations of the Union, the States, the Federal District and the Municipalities in this regard.

 

 

Art. 2º A disciplina do uso da internet no Brasil tem como fundamento o respeito à liberdade de expressão, bem como:

Article 2. The discipline of Internet use in Brazil has as fundamentals the respect for freedom of expression, as well as:

I – o reconhecimento da escala mundial da rede;

I – acknowledgment of the global scale of the network;

II – os direitos humanos, o desenvolvimento da personalidade e o exercício da cidadania em meios digitais;

II – human rights, personality development and citizenship exercise in digital media

III – a pluralidade e a diversidade;

III – pluralism and diversity;

IV – a abertura e a colaboração;

IV – openness and collaboration;

V – a livre iniciativa, a livre concorrência e a defesa do consumidor; e

V – free enterprise, free competition and consumer protection, and

VI – a finalidade social da rede.

VI – the network’s social purposes.

 

 

Art. 3º A disciplina do uso da internet no Brasil tem os seguintes princípios:

Article 3. The discipline of Internet use in Brazil has the following principles:

I – garantia da liberdade de expressão, comunicação e manifestação de pensamento, nos termos da Constituição Federal;

I – guarantee of freedom of expression, communication and expression of thoughts, under the terms of the Federal Constitution;

II – proteção da privacidade;

II – protecting privacy;

III – proteção dos dados pessoais, na forma da lei;

III – protecting personal data, as provided by law;

IV – preservação e garantia da neutralidade de rede;

IV – preserving and safeguarding network neutrality;

V – preservação da estabilidade, segurança e funcionalidade da rede, por meio de medidas técnicas compatíveis com os padrões internacionais e pelo estímulo ao uso de boas práticas;

V – preserving stability, security and network functionality, through technical measures consistent with international standards and by encouraging the implementation of best practices;

VI – responsabilização dos agentes de acordo com suas atividades, nos termos da lei;

VI – ensuring that players/agents are accountable according to their activities, as foreseen by law, and

VII – preservação da natureza participativa da rede;

VII – ensuring the participatory/collaborative purpose of the network.

VIII - liberdade dos modelos de negócios promovidos na internet, desde que não conflitem com os demais princípios estabelecidos nesta Lei.

VII - ensuring free business models promoted on the Internet, provided they do not conflict with the other principles established in this Law

Parágrafo único. Os princípios expressos nesta Lei não excluem outros previstos no ordenamento jurídico pátrio relacionados à matéria ou nos tratados internacionais em que a República Federativa do Brasil seja parte.

Sole paragraph. The principles expressed in this Law do not exclude others in the national legal system relating to the matter, or the international treaties to which the Federative Republic of Brazil is a party.

 

 

Art. 4º A disciplina do uso da internet no Brasil tem os seguintes objetivos:

Article 4. The discipline of Internet use in Brazil has the following goals:

I – promover o direito de acesso à internet a todos;

I – to promote every person’s right to access the Internet;

II – promover o acesso à informação, ao conhecimento e à participação na vida cultural e na condução dos assuntos públicos;

II - to promote access to information, knowledge and participation in cultural life and public affairs;

III – promover a inovação e fomentar a ampla difusão de novas tecnologias e modelos de uso e acesso; e

III – to promote innovation and to foster the widespread availability of new technologies, as well as their use and access; and

IV – promover a adesão a padrões tecnológicos abertos que permitam a comunicação, a acessibilidade e a interoperabilidade entre aplicações e bases de dados.

IV - to promote adherence to open technology standards that enable communication, accessibility and interoperability between applications and databases.

 

 

Art. 5º Para os efeitos desta Lei, considera-se:

Article 5. For the purposes of this Act, the terms below are defined as follows:

I – internet: o sistema constituído do conjunto de protocolos lógicos, estruturado em escala mundial para uso público e irrestrito, com a finalidade de possibilitar a comunicação de dados entre terminais por meio de diferentes redes;

I - Internet: the system comprised of a set of logical protocols, structured on a global scale for unrestricted and public use, in order to enable data communication between terminals over different networks;

II – terminal: o computador ou qualquer dispositivo que se conecte à internet;

II - terminal: the computer or any device that connects to the Internet;

III – administrador de sistema autônomo: a pessoa física ou jurídica que administra blocos de endereço Internet Protocol – IP específicos e o respectivo sistema autônomo de roteamento, devidamente cadastrada no ente nacional responsável pelo registro e distribuição de endereços IP geograficamente referentes ao País;

III - autonomous system administrator: a person or legal entity that manages specific blocks of Internet Protocol addresses and their respective autonomous routing system, who is duly registered with the national authority responsible for registration and distribution of IP addresses geographically concerning to the  country;

IV – endereço IP: o código atribuído a um terminal de uma rede para permitir sua identificação, definido segundo parâmetros internacionais;

IV – IP address: the code assigned to a terminal connected to a network that enables terminal identification, according to international standards;

V – conexão à internet: a habilitação de um terminal para envio e recebimento de pacotes de dados pela internet, mediante a atribuição ou autenticação de um endereço IP;

V - Internet connection: action that enables a terminal to send and receive data packets over the Internet, by IP address assignment or authentication;

VI – registro de conexão: o conjunto de informações referentes à data e hora de início e término de uma conexão à internet, sua duração e o endereço IP utilizado pelo terminal para o envio e recebimento de pacotes de dados;

VI - connection log: a set of information regarding the date and time that the Internet connection begins and ends, its duration and the IP address used by the terminal to send and receive data packets;

VII – aplicações de internet: o conjunto de funcionalidades que podem ser acessadas por meio de um terminal conectado à internet; e

VII - Internet application: a set of features that can be accessed by a terminal connected to the Internet, and

VIII – registros de acesso a aplicações de internet: o conjunto de informações referentes à data e hora de uso de uma determinada aplicação de internet a partir de um determinado endereço IP.

VIII – Record of access to Internet applications: a set of information regarding the date and time when a specific Internet application was used, from a given IP address.

 

 

Art. 6º Na interpretação desta Lei serão levados em conta, além dos fundamentos, princípios e objetivos previstos, a natureza da internet, seus usos e costumes particulares e sua importância para a promoção do desenvolvimento humano, econômico, social e cultural.

Article 6. Any interpretation of this Act shall take into account the nature of the Internet, its particular uses and traditions, and its relevance in promoting human, economic, social and cultural development, as well as the fundamental safeguards, principles and objectives set forth herein.

 

 

CAPÍTULO II

CHAPTER II

DOS DIREITOS E GARANTIAS DOS USUÁRIOS

INTERNET USER RIGHTS AND SAFEGUARDS

 

 

Art. 7º O acesso à internet é essencial ao exercício da cidadania, e ao usuário são assegurados os seguintes direitos:

Article 7. Access to the Internet is essential to the exercise of citizenship and users are assured the following rights:

I – inviolabilidade da intimidade e da vida privada, sua proteção e indenização pelo dano material ou moral decorrente de sua violação;

I – to the inviolability of intimacy and private life, guaranteed the right to its protection and compensation for material or moral damages resulting from its violation;

II – inviolabilidade e sigilo do fluxo de suas comunicações pela internet, salvo por ordem judicial, na forma da lei;

II – to the inviolability and confidentiality of communications over the Internet, except when this right is waived by court order, under the terms of the law;

III – inviolabilidade e sigilo de suas comunicações privadas armazenadas, salvo por ordem judicial;

III - to the inviolability and secrecy of stored private communications, except by court order;

IV – não suspensão da conexão à internet, salvo por débito diretamente decorrente de sua utilização;

IV – to the non-suspension of Internet connection, except for failure of payments directly related to its use;

V – manutenção da qualidade contratada da conexão à internet;

V – to the maintenance of the hired quality of Internet connection;

VI – informações claras e completas constantes dos contratos de prestação de serviços, com detalhamento sobre o regime de proteção aos registros de conexão e aos registros de acesso a aplicações de internet, bem como sobre práticas de gerenciamento da rede que possam afetar sua qualidade;

VI - to clear and complete information contained in the services contracts , with details on the arrangements for protecting the connection logs and access records to Internet applications, as well as network management practices that can affect its quality, and

VII – não fornecimento a terceiros de seus dados pessoais, inclusive registros de conexão, e de acesso a aplicações de internet, salvo mediante consentimento livre, expresso e informado ou nas hipóteses previstas em lei;

VII - to the guarantee that connection logs, access to Internet applications records and personal data will not be shared with third parties, except upon the user’s express free and informed consent or as provided by law;  

VIII – informações claras e completas sobre coleta, uso, armazenamento, tratamento e proteção de seus dados pessoais, que somente poderão ser utilizados para finalidades que:

VIII - to clear and complete information on the collection, use, storage, treatment and protection of their personal data, which can only be used for purposes which:

a) justifiquem sua coleta;

a) justify their collection;

b) não sejam vedadas pela legislação; e

b) are not forbidden, and

c) estejam especificadas nos contratos de prestação de serviços ou em termos de uso de aplicações de internet;

c) are specified in service agreements or terms of use of Internet applications.

IX – consentimento expresso sobre coleta, uso, armazenamento e tratamento de dados pessoais, que deverá ocorrer de forma destacada das demais cláusulas contratuais;

IX – to express consent on the collection, use, storage and processing of personal data, which should occur detached from the other contractual terms ;

X – exclusão definitiva dos dados pessoais que tiver fornecido a determinada aplicação de internet, a seu requerimento, ao término da relação entre as partes, ressalvadas as hipóteses de guarda obrigatória de registros previstas nesta Lei;

X – to the definitive exclusion of the personal data you have provided to certain Internet application, and when required, to the end of the relationship between the parties, except in the cases of mandatory custody records under this Law;

XI – publicidade e clareza de eventuais políticas de uso dos provedores de conexão à internet e de aplicações de internet;

XI – to the publicity and clarity of existent internet connection providers and Internet application providers terms/policies of use;

XII - acessibilidade, consideradas as características físico-motoras, perceptivas, sensoriais, intelectuais e mentais do usuário, nos termos da lei; e

XII - to the accessibility, considering any physical and motor, perceptual, sensory, intellectual and mental characteristics of the user, under the terms of the law; and

XIII - aplicação das normas de proteção e defesa do consumidor nas relações de consumo realizadas na internet.

XIII - to the application of consumer protection regulations in transactions conducted on the Internet.

 

 

Art. 8º A garantia do direito à privacidade e à liberdade de expressão nas comunicações é condição para o pleno exercício do direito de acesso à internet.

Article 8. The guarantee of the right to privacy and to freedom of expression in communications is a condition for the full exercise of the right of access to the Internet.

Parágrafo único. São nulas de pleno direito as cláusulas contratuais que violem o disposto no caput, tais como aquelas que:

Single paragraph. Are null and void the contract terms that violate the provisions aforementioned on article 8, such as those that:

I - impliquem ofensa à inviolabilidade e ao sigilo das comunicações privadas, pela internet; ou

I - offend the inviolability and secrecy of private communications over the Internet, or

II – em contrato de adesão, não ofereçam como alternativa ao contratante a adoção do foro brasileiro para solução de controvérsias decorrentes de serviços prestados no Brasil.

II - in adhesion contracts, do not offer an alternative to the user-contractor to adopt the Brazilian courts for resolving disputes arising from services rendered in Brazil.

 

 

CAPÍTULO III

CHAPTER III

DA PROVISÃO DE CONEXÃO E DE APLICAÇÕES DE INTERNET

THE PROVISION OF CONNECTION AND INTERNET APPLICATIONS

 

 

Seção I

Section I

Da Neutralidade de Rede

The Network Neutrality

 

 

Art. 9º O responsável pela transmissão, comutação ou roteamento tem o dever de tratar de forma isonômica quaisquer pacotes de dados, sem distinção por conteúdo, origem e destino, serviço, terminal ou aplicação.

Article 9. The agent in charge of transmission, switching or routing is obliged to treat any data package with isonomy, regardless of content, origin and destination, service, terminal or application.

§ 1º A discriminação ou degradação do tráfego será regulamentada nos termos das atribuições privativas do Presidente da República previstas no inciso IV do art. 84 da Constituição Federal, para a fiel execução desta Lei, ouvidos o Comitê Gestor da Internet e a Agência Nacional de Telecomunicações, e somente poderá decorrer de:

§ 1st Discrimination or degradation of traffic will be regulated in accordance to the private assignments of the President of the Republic provided in item IV of the Article 84 of the Constitution, to the faithful implementation of this Law, being heard the Internet Steering Committee (CGI) and the National Agency of Telecommunications (ANATEL), and may only arise from:

I – requisitos técnicos indispensáveis à prestação adequada dos serviços e aplicações; e

I – technical requirements essential for the adequate provision of services and applications; and

II – priorização de serviços de emergência.

II – emergency services prioritization.

§ 2º Na hipótese de discriminação ou degradação do tráfego prevista no § 1º, o responsável mencionado no caput deve:

§ 2nd In the event of discrimination or degradation of traffic referred to in paragraph 1, the aforementioned agent must:

I – abster-se de causar dano aos usuários, na forma do art. 927 da Lei nº 10.406, de 10 de janeiro de 2002 - Código Civil;

I – to refrain from causing damage to users, as regarded in article 927 of the Civil Code;

II – agir com proporcionalidade, transparência e isonomia;

II – to act with proportionality, transparency and equal protection;

III – informar previamente de modo transparente, claro e suficientemente descritivo aos seus usuários sobre as práticas de gerenciamento e mitigação de tráfego adotadas, inclusive as relacionadas à segurança da rede; e

III – to inform previously the users in a transparent, clear and sufficiently descriptive manner about its management and traffic mitigation adopted practices, including those related to network security; and

IV – oferecer serviços em condições comerciais não discriminatórias e abster-se de praticar condutas anticoncorrenciais.

IV – to provide services on non-discriminatory commercial conditions and refrain from practicing anticompetitive behaviors.

§ 3º Na provisão de conexão à internet, onerosa ou gratuita, bem como na transmissão, comutação ou roteamento, é vedado bloquear, monitorar, filtrar ou analisar o conteúdo dos pacotes de dados, respeitado o disposto neste artigo.

§ 3rd In the provision of Internet connection, onerous or for free, as well as in the transmission, switching or routing, it is forbidden to block, monitor, filter or analyse the contents of data packets, respected the provisions of this article.

 

 

Seção II

Section II

Da Proteção aos Registros, aos Dados Pessoais e às Comunicações Privadas

The Protection of Records, Personal and Private Data Communications

 

 

Art. 10. A guarda e a disponibilização dos registros de conexão e de acesso a aplicações de internet de que trata esta Lei, bem como de dados pessoais e do conteúdo de comunicações privadas, devem atender à preservação da intimidade, à vida privada, à honra e à imagem das partes direta ou indiretamente envolvidas.

Article 10. The ward and availability of the connection and access logs to Internet applications, of which this Act refers to, as well as of personal data and the contents of private communications, must meet the conservation of intimacy, private life, honor and image of the parties directly or indirectly involved.

§ 1º O provedor responsável pela guarda somente será obrigado a disponibilizar os registros mencionados no caput, de forma autônoma ou associados a dados pessoais ou a outras informações que possam contribuir para a identificação do usuário ou do terminal, mediante ordem judicial, na forma do disposto na Seção IV deste Capítulo, respeitado o disposto no art. 7º.

§ 1st The provider responsible for record retention will only be required to provide the aforementioned records, alone or combined with other information that may contribute to the user or terminal identification, upon court order, as set forth in Section IV of this Chapter, respecting the provisions of Article 7.

§ 2º O conteúdo das comunicações privadas somente poderá ser disponibilizado mediante ordem judicial, nas hipóteses e na forma que a lei estabelecer, respeitado o disposto nos incisos II e III do art. 7º.

§ 2nd The content of private communications may only be provided by court order, in the case and in the manner provided by law, subject to the provisions of items II and III of Article 7.

§ 3º O disposto no caput não impede o acesso aos dados cadastrais que informem qualificação pessoal, filiação e endereço, na forma da lei, pelas autoridades administrativas que detenham competência legal para a sua requisição.

§ 3rd The provisions of this article do not prevent access by the administrative authorities, holding legal authority for this request, to registry data that inform individual qualification, affiliation and address, as provided by law.

§ 4º As medidas e os procedimentos de segurança e de sigilo devem ser informados pelo responsável pela provisão de serviços de forma clara e atender a padrões definidos em regulamento, respeitado seu direito de confidencialidade quanto a segredos empresariais.

§ 4th The measures and procedures for security and secrecy must be clearly informed by the service provider and meet the standards set forth by regulation, with respect its right to confidentiality as well to trade secrets.

 

 

Art. 11. Em qualquer operação de coleta, armazenamento, guarda e tratamento de registros, dados pessoais ou de comunicações por provedores de conexão e de aplicações de internet em que pelo menos um desses atos ocorra em território nacional, deverão ser obrigatoriamente respeitados a legislação brasileira e os direitos à privacidade, à proteção dos dados pessoais e ao sigilo das comunicações privadas e dos registros.

Article 11. Any process of collection, storage, custody and treatment of records, personal or communications data by connection providers and Internet applications providers, in which at least one of these acts occurs in the national territory, shall respect Brazilian law, the rights to privacy, and the confidentiality of personal data, of private communications and records.

§ 1º O disposto no caput aplica-se aos dados coletados em território nacional e ao conteúdo das comunicações, desde que pelo menos um dos terminais esteja localizado no Brasil.

§ 1st The provisions aforementioned apply to data collected in national territory and to the content of communications, in which at least one of the terminals is located in Brazil.

§ 2º O disposto no caput aplica-se mesmo que as atividades sejam realizadas por pessoa jurídica sediada no exterior, desde que oferte serviço ao público brasileiro ou pelo menos uma integrante do mesmo grupo econômico possua estabelecimento no Brasil.

§ 2nd The provisions aforementioned apply even if the activities are carried out by a legal person located abroad, since that the offered services to  Brazilian public or that at least one member of the same economic group owns establishments in Brazil.

§ 3º Os provedores de conexão e de aplicações de internet deverão prestar, na forma da regulamentação, informações que permitam a verificação quanto ao cumprimento da legislação brasileira referente à coleta, à guarda, ao armazenamento ou ao tratamento de dados, bem como quanto ao respeito à privacidade e ao sigilo de comunicações.

§ 3rd The connection providers and Internet applications provider shall provide, in the form of regulations, information that allow the verification of their compliance with Brazilian legislation regarding the collection, custody, storage and processing of data, as well as how the provider respects the privacy and secrecy of communications.

§ 4º Decreto regulamentará o procedimento para apuração de infrações ao disposto neste artigo.

§ 4th Decree shall regulate the procedure for finding violations of the provisions of this article.

 

 

Art. 12. Sem prejuízo das demais sanções cíveis, criminais ou administrativas, as infrações às normas previstas nos arts. 10 e 11 ficam sujeitas, conforme o caso, às seguintes sanções, aplicadas de forma isolada ou cumulativa:

Article 12. Without prejudice to other civil, criminal or administrative penalties, the violations of the rules laid down in Articles 10 and 11 shall be subject, as appropriate, the following sanctions, applied individually or cumulatively:  

I – advertência, com indicação de prazo para adoção de medidas corretivas;

I - warning, indicating the deadline for corrective action

II – multa de até 10% (dez por cento) do faturamento do grupo econômico no Brasil no seu último exercício, excluídos os tributos, considerados a condição econômica do infrator e o princípio da proporcionalidade entre a gravidade da falta e a intensidade da sanção;

II - a fine of up to ten percent of the gross revenues of the economic group in Brazil in its last financial year, excluding taxes; considered the violator economic condition and the proportionality principle between the penalty gravity and the sanction intensity.

III – suspensão temporária das atividades que envolvam os atos previstos no art. 11; ou

III - Temporary suspension of activities involving the acts specified in Article 11 and; or

IV – proibição de exercício das atividades que envolvam os atos previstos no art. 11.

IV - the prohibition of the exercise of activities that involve the acts referred to in Article 11.

Parágrafo único. Tratando-se de empresa estrangeira, responde solidariamente pelo pagamento da multa de que trata o caput sua filial, sucursal, escritório ou estabelecimento situado no País.

Sole paragraph. In the case of a foreign company, its subsidiary, branch, office or establishment in the country will be jointly and severally liable for payment of the penalties aforementioned

 

 

Subseção I

Subsection I

Da Guarda de Registros de Conexão

The Guard of Connection Records

 

 

Art. 13. Na provisão de conexão à internet, cabe ao administrador de sistema autônomo respectivo o dever de manter os registros de conexão, sob sigilo, em ambiente controlado e de segurança, pelo prazo de 1 (um) ano, nos termos do regulamento.

Article 13. In the provision of internet connection, it is up to the autonomous system administrator the respective duty to retain connection logs under strict confidentiality, in a controlled and safe environment for one year, under the terms of the regulation.

§ 1º A responsabilidade pela manutenção dos registros de conexão não poderá ser transferida a terceiros.

§ 1st The responsibility for retaining connection logs cannot be transferred to third parties

§ 2º A autoridade policial ou administrativa ou o Ministério Público poderá requerer cautelarmente que os registros de conexão sejam guardados por prazo superior ao previsto no caput.

§ 2nd The police, administrative authorities or the public prosecutors may require that precautionary connection logs are retained for longer than foreseen in this article;

§ 3º Na hipótese do § 2º, a autoridade requerente terá o prazo de 60 (sessenta) dias, contados a partir do requerimento, para ingressar com o pedido de autorização judicial de acesso aos registros previstos no caput.

§ 3rd In the case foreseen in § 2, the applicant authority shall have a period of 60 (sixty) days, from the date of request, to file for a court order to authorize access to the referred records.

§ 4º O provedor responsável pela guarda dos registros deverá manter sigilo em relação ao requerimento  previsto  no § 2º, que perderá sua eficácia caso o pedido de autorização judicial seja indeferido ou não tenha sido protocolado no prazo previsto no § 3º.

§ 4th The provider responsible for record retention must protect the confidentiality of the requests foreseen in paragraph 2, which shall be null if the court order is denied or if it is not filed within the period set forth in § 3

§ 5º Em qualquer hipótese, a disponibilização ao requerente dos registros de que trata este artigo deverá ser precedida de autorização judicial, conforme disposto na Seção IV deste Capítulo.

§ 5th In any circumstances, the availability to the logs plaintiff that is this article object must be preceded by court order, set forth in Section IV from this Chapter.

§ 6º Na aplicação de sanções pelo descumprimento ao disposto neste artigo, serão considerados a natureza e a gravidade da infração, os danos dela resultantes, eventual vantagem auferida pelo infrator, as circunstâncias agravantes, os antecedentes do infrator e a reincidência.

§ 6th In sanctions application for breach from the provided in this article, the nature and the infraction gravity, the resulting damages, an eventual earned infractor advantage, the aggravating circumstances, the background of the infractor and the recidivism will be considered.

 

 

Subseção II

Subsection II

Da Guarda de Registros de Acesso a Aplicações de Internet na Provisão de Conexão

The Guard of Access Records to Internet Applications within Connection Provision

 

 

Art. 14. Na provisão de conexão, onerosa ou gratuita, é vedado guardar os registros de acesso a aplicações de internet.

Article 14. In the provision of connection, onerous or gratuitous, is forbidden to retain records of access to Internet applications.

 

 

Subseção III

Subsection III

Da Guarda de Registros de Acesso a Aplicações de Internet na Provisão de Aplicações

The Guard of Access Records to Internet Applications within Applications Provisions

 

 

Art. 15. O provedor de aplicações de internet constituído na forma de pessoa jurídica e que exerça essa atividade de forma organizada, profissionalmente e com fins econômicos deverá manter os respectivos registros de acesso a aplicações de internet, sob sigilo, em ambiente controlado e de segurança, pelo prazo de 6 (seis) meses, nos termos do regulamento.

Article 15. Internet application providers established as legal person exercising this activity in an organized manner, professionally and for economic purposes, must maintain their access logs of Internet applications in confidentiality, in a controlled and safe location for six months, under the terms of this regulation.

§ 1º Ordem judicial poderá obrigar, por tempo certo, os provedores de aplicações de internet que não estão sujeitos ao disposto no caput a guardarem registros de acesso a aplicações de internet, desde que se tratem de registros relativos a fatos específicos em período determinado.

§ 1st Court order may require, for a given time, Internet applications providers that are not subject to the provisions set aforementioned in this article, to retain records of access to Internet applications, provided that these records relate to a specific event in a given period.

§ 2º A autoridade policial ou administrativa ou o Ministério Público poderão requerer cautelarmente a qualquer provedor de aplicações de internet que os registros de acesso a aplicações de internet sejam guardados, inclusive por prazo superior ao previsto no caput, observado o disposto nos §§ 3º e 4º do art. 13.

§ 2nd The police, administrative authorities or the public prosecutors may require to any internet applications provider that precautionary access logs Internet applications are stored, even for a period longer than foreseen in this article, as set forth in paragraph 3 and 4 of Article 13.

§ 3º Em qualquer hipótese, a disponibilização ao requerente dos registros de que trata este artigo deverá ser precedida de autorização judicial, conforme disposto na Seção IV deste Capítulo.

§ 3rd In any circumstances, the provision of records to the requiring party referred to in this article shall be preceded by judicial authorization, as set forth in Section IV of this Chapter.

§ 4º Na aplicação de sanções pelo descumprimento ao disposto neste artigo, serão considerados a natureza e a gravidade da infração, os danos dela resultantes, eventual vantagem auferida pelo infrator, as circunstâncias agravantes, os antecedentes do infrator e a reincidência.

§ 4th In the application of sanctions for noncompliance with the provisions of this Article, the nature and gravity of the offense, the harm resulting from it, any benefit to the offender, aggravating circumstances, the background of the offender and recidivism shall be considered.

 

 

Art. 16. Na provisão de aplicações de internet, onerosa ou gratuita, é vedada a guarda:

Article 16. In the provision of Internet applications, onerous or gratuitous, is forbidden the custody of:

I - dos registros de acesso a outras aplicações de internet sem que o titular dos dados tenha consentido previamente, respeitado o disposto no art. 7º; ou

I - Records from other Internet applications without the consent given previously by the data owner, respecting the provisions of Article 7.

II – de dados pessoais que sejam excessivos em relação à finalidade para a qual foi dado consentimento pelo seu titular.

II - Personal data that is excessive in relation to the purpose for which consent was given by its data owner.

 

 

Art. 17. Ressalvadas as hipóteses previstas nesta Lei, a opção por não guardar os registros de acesso a aplicações de internet não implica responsabilidade sobre danos decorrentes do uso desses serviços por terceiros.

Article 17. Except in the cases provided for in this Law, the option of not to keep records of access to Internet applications does not imply liability for damages resulting from use of these services by third parties.

 

 

Seção III

Section III

Da Responsabilidade por Danos Decorrentes de Conteúdo Gerado por Terceiros

Responsibility for Damage Arising from Content generated by a Third Party

 

 

Art. 18. O provedor de conexão à internet não será responsabilizado civilmente por danos decorrentes de conteúdo gerado por terceiros.

Article 19. The provider of Internet connection will not be civilly liable for damages arising from content generated by third parties.

 

 

Art. 19. Com o intuito de assegurar a liberdade de expressão e impedir a censura, o provedor de aplicações de internet somente poderá ser responsabilizado civilmente por danos decorrentes de conteúdo gerado por terceiros se, após ordem judicial específica, não tomar as providências para, no âmbito e nos limites técnicos do seu serviço e dentro do prazo assinalado, tornar indisponível o conteúdo apontado como infringente, ressalvadas as disposições legais em contrário.

Article 20. In order to ensure freedom of expression and to prevent censorship, the provider of Internet applications can only be liable for civil damages arising out of content generated by third parties if it does not act, after specific court order, within the framework and technical limits of its services and timely mentioned, to make the content identified as infringing unavailable, except for contrary established statutory provisions.

§ 1º A ordem judicial de que trata o caput deverá conter, sob pena de nulidade, identificação clara e específica do conteúdo apontado como infringente, que permita a localização inequívoca do material.

§ 1st The aforementioned court order, must clearly and specifically, identify the infringing content, enabling its unambiguous location, subject to be considered void otherwise.

§ 2º A aplicação do disposto neste artigo para infrações a direitos de autor ou a direitos conexos depende de previsão legal específica, que deverá respeitar a liberdade de expressão e demais garantias previstas no art. 5º da Constituição Federal.

§ 2nd The application of this article for violations of copyright or related rights depends on specific statutory regulation, which must respect freedom of expression and other guarantees provided for in art. 5 of the Federal Constitution.

§ 3º As causas que versem sobre ressarcimento por danos decorrentes de conteúdos disponibilizados na internet relacionados à honra, à reputação ou a direitos de personalidade bem como sobre a indisponibilização desses conteúdos por provedores de aplicações de internet poderão ser apresentadas perante os juizados especiais.

§ 3rd Causes that deal with compensation for damages resulting from content on the Internet related to the honour, reputation or rights of personality as well as with the taking down of such content by Internet applications providers may be submitted before special courts.

§ 4º O juiz, inclusive no procedimento  previsto  no § 3º, poderá antecipar, total ou parcialmente, os efeitos da tutela pretendida no pedido inicial, existindo prova inequívoca do fato e considerado o interesse da coletividade na disponibilização do conteúdo na internet, desde que presentes os requisitos de verossimilhança da alegação do autor e de fundado receio de dano irreparável ou de difícil reparação.

§ 4th The Judge, including in proceedings set in paragraph 3, may anticipate, totally or partially, the effects the intended protection in the initial request, when unequivocal proof of the fact exists and considered the interest of the community in providing the content on the Internet, since the requirements of verisimilitude of the author are present and that the claim of fear of irreparable damage or of difficult repairment is grounded.

 

 

Art. 20. Sempre que tiver informações de contato do usuário diretamente responsável pelo conteúdo a que se refere o art. 19, caberá ao provedor de aplicações de internet comunicar-lhe os motivos e informações relativos à indisponibilização de conteúdo, com informações que permitam o contraditório e a ampla defesa em juízo, salvo expressa previsão legal ou expressa determinação judicial fundamentada em contrário.

Article 20. Whenever available the contact information for the user directly responsible for the content referred in Article 19, the Internet applications provider shall communicate to the user the reasons and information concerning the unavailability of content, with information enabling full legal defense in court, unless expressed in legal provision or in substantiated judicial decision determining otherwise.

Parágrafo único. Quando solicitado pelo usuário que disponibilizou o conteúdo tornado indisponível, o provedor de aplicações de internet que exerce essa atividade de forma organizada, profissionalmente e com fins econômicos substituirá o conteúdo tornado indisponível pela motivação ou pela ordem judicial que deu fundamento à indisponibilização.

Single paragraph. When requested by the user that provided the content made ​​unavailable, the Internet applications provider that performs this activity neatly and professionally, for economic purposes, shall replace the content made unavailable for the judicial decision that substantiate the unavailability.

 

Art. 21. O provedor de aplicações de internet que disponibilize conteúdo gerado por terceiros será responsabilizado subsidiariamente pela violação da intimidade decorrente da divulgação, sem autorização de seus participantes, de imagens, de vídeos ou de outros materiais contendo cenas de nudez ou de atos sexuais de caráter privado quando, após o recebimento de notificação pelo participante ou seu representante legal, deixar de promover, de forma diligente, no âmbito e nos limites técnicos do seu serviço, a indisponibilização desse conteúdo.

Article 21. The Internet application provider that delivers content generated by third parties will be secondarily liable for infringement of privacy resulting from disclosure, without consent of its participants, of photos, videos or other materials containing nudity or acts sexual private character when, after receipt of notification by the participant or legal representative, fail to promote, diligently, and within the technical limits of its service, the unavailability of such content.

Parágrafo único. A notificação prevista no caput deverá conter, sob pena de nulidade, elementos que permitam a identificação específica do material apontado como violador da intimidade do participante e a verificação da legitimidade para apresentação do pedido.

Single paragraph. The notification referred to in this Article shall have, under penalty of nullity, elements that allow for the specific identification of the material identified as infringing the privacy of the participant and verification of legitimacy to the request presentation.

 

 

Seção IV

Section IV

Da Requisição Judicial de Registros

Requisition Judicial Records

 

 

Art. 22. A parte interessada poderá, com o propósito de formar conjunto probatório em processo judicial cível ou penal, em caráter incidental ou autônomo, requerer ao juiz que ordene ao responsável pela guarda o fornecimento de registros de conexão ou de registros de acesso a aplicações de internet.

Article 22. For the purpose of gathering evidence and proof for legal proceedings in civil or criminal areas, the interested party may request to judge an order addressed to the responsible for record retention to disclose connection or access to applications logs, on an incidental or standalone basis.

Parágrafo único. Sem prejuízo dos demais requisitos legais, o requerimento deverá conter, sob pena de inadmissibilidade:

Sole paragraph. Without prejudice to other legal requirements, the court order shall contain, under penalty of inadmissibility:

I – fundados indícios da ocorrência do ilícito;

I – underlying offense evidence;

II – justificativa motivada da utilidade dos registros solicitados para fins de investigação ou instrução probatória; e

II – reasoned justification for the relevance of the requested records to the investigation or probative use; and

III – período ao qual se referem os registros.

III - the specific period the records refer to.

 

 

Art. 23. Cabe ao juiz tomar as providências necessárias à garantia do sigilo das informações recebidas e à preservação da intimidade, da vida privada, da honra e da imagem do usuário, podendo determinar segredo de justiça, inclusive quanto aos pedidos de guarda de registro.

Article 23. The judge is responsible for taking the necessary measures to ensure the confidentiality of the received information and to safeguard the privacy, private life, honor and image of the user. The judge may deem the legal proceedings classified.

 

 

CAPÍTULO IV

CHAPTER IV

DA ATUAÇÃO DO PODER PÚBLICO

OF THE ROLE OF PUBLIC AUTHORITIES

 

 

Art. 24. Constituem diretrizes para a atuação da União, dos Estados, do Distrito Federal e dos Municípios no desenvolvimento da internet no Brasil:

Article 24. Constitute guidelines for the activities of the Union, States, Federal District and Municipalities in the development of the Internet in Brazil:

I – estabelecimento de mecanismos de governança multiparticipativa, transparente, colaborativa e democrática, com a participação do governo, do setor empresarial, da sociedade civil e da comunidade acadêmica;

I – establishing mechanisms for a multistakeholder, transparent, collaborative, and democratic governance, with the participation of the government, business sectors, civil society and the academic community;

II – promoção da racionalização da gestão, expansão e uso da internet, com participação do Comitê Gestor da internet no Brasil;

II – the promotion of the rationalization of management, expansion and use of the Internet, with the participation of Internet Management Committee in Brazil;

III – promoção da racionalização e da interoperabilidade tecnológica dos serviços de governo eletrônico, entre os diferentes Poderes e âmbitos da Federação, para permitir o intercâmbio de informações e a celeridade de procedimentos;

III - promoting the rationalization and technological interoperability of electronic government services among different governmental bodies to enable information exchange and speedy procedures;

IV – promoção da interoperabilidade entre sistemas e terminais diversos, inclusive entre os diferentes âmbitos federativos e diversos setores da sociedade;

IV - promoting interoperability between different systems and terminals, including among different federal instances and different sectors of society;

V – adoção preferencial de tecnologias, padrões e formatos abertos e livres;

V - preferential adoption of open and free technologies, standards and formats;

VI – publicidade e disseminação de dados e informações públicos, de forma aberta e estruturada;

VI - publicity and dissemination of data and public information in an open and structured manner;

VII – otimização da infraestrutura das redes e estímulo à implantação de centros de armazenamento, gerenciamento e disseminação de dados no País, promovendo a qualidade técnica, a inovação e a difusão das aplicações de internet, sem prejuízo à abertura, à neutralidade e à natureza participativa;

VII - optimization of infrastructure networks and the encouragement of the establishment of centers for storage, management and dissemination of data in the country, promoting the technical quality, innovation and diffusion of Internet applications, without prejudice to the openness, neutrality and participatory nature;

VIII – desenvolvimento de ações e programas de capacitação para uso da internet;

VIII - development of actions and capacity training programs for Internet use;

IX – promoção da cultura e da cidadania; e

IX - promotion of culture and citizenship, and

X – prestação de serviços públicos de atendimento ao cidadão de forma integrada, eficiente, simplificada e por múltiplos canais de acesso, inclusive remotos.

X - provision of public services to the citizen in an integrated, efficient, simplified and through multiple access channels, including remote.

 

 

Art. 25. As aplicações de internet de entes do poder público devem buscar:

Article 25. The Government’s Internet applications should seek to:

I – compatibilidade dos serviços de governo eletrônico com diversos terminais, sistemas operacionais e aplicativos para seu acesso;

I - compatibility of e-Government services with various terminals, operating systems and  applications to its access;

II – acessibilidade a todos os interessados, independentemente de suas capacidades físico-motoras, perceptivas, sensoriais, intelectuais, mentais, culturais e sociais, resguardados os aspectos de sigilo e restrições administrativas e legais;

II - accessibility to all interested parties, regardless of their physical, motor, perceptual, cultural and social abilities in compliance with confidentiality and legal and administrative restrictions;

III – compatibilidade tanto com a leitura humana quanto com o tratamento automatizado das informações;

III - compatibility with human reading as well as automated data processing;

IV – facilidade de uso dos serviços de governo eletrônico; e

IV – user friendliness of e-government services; and

V – fortalecimento da participação social nas políticas públicas.

V – strengthening social engagement in public policies.

 

 

Art. 26. O cumprimento do dever constitucional do Estado na prestação da educação, em todos os níveis de ensino, inclui a capacitação, integrada a outras práticas educacionais, para o uso seguro, consciente e responsável da internet como ferramenta para o exercício da cidadania, a promoção de cultura e o desenvolvimento tecnológico.

Article. 26. The government’s constitutional duty to provide education at all levels of learning includes training combined with other educational practices for the safe, responsible and conscious use of the Internet as a tool for citizenship, and to promote culture and technological development.

 

 

Art. 27. As iniciativas públicas de fomento à cultura digital e de promoção da internet como ferramenta social devem:

Article 27. Public initiatives to promote digital literacy and the Internet as a social tool must:

I – promover a inclusão digital;

I – promote digital inclusion;

II – buscar reduzir as desigualdades, sobretudo entre as diferentes regiões do País, no acesso às tecnologias da informação e comunicação e no seu uso; e

II - seek to reduce inequalities in access to and use of information and communication technologies, particularly between different regions of the country, and

III – fomentar a produção e circulação de conteúdo nacional.

III - foster national content production and dissemination

 

 

Art. 28. O Estado deve, periodicamente, formular e fomentar estudos, bem como fixar metas, estratégias, planos e cronogramas referentes ao uso e desenvolvimento da internet no País.

Art. 28. The government must design and promote regular studies, as well as set goals, strategies, plans and timelines for the use and development of the Internet in Brazil.

 

 

CAPÍTULO V

CHAPTER V

DISPOSIÇÕES FINAIS

FINAL PROVISIONS

 

 

Art. 29. O usuário terá a opção de livre escolha na utilização de programa de computador em seu terminal para exercício do controle parental de conteúdo entendido por ele como impróprio a seus filhos menores, desde que respeitados os princípios desta Lei e da Lei nº 8.069, de 13 de julho de 1990 – Estatuto da Criança e do Adolescente.

Article 29. The user will be free to use software in their terminals to facilitate parental control content, understood by them as unfit to their minor children, provided they comply with the principles of this Law and the Law No. 8069 of July 13, 1990.

Parágrafo único. Cabe ao poder público, em conjunto com os provedores de conexão e de aplicações de internet e a sociedade civil, promover a educação e fornecer informações sobre o uso dos programas de computador previstos no caput, bem como para a definição de boas práticas para a inclusão digital de crianças e adolescentes.

Single paragraph. It is up to the Government, combined with Internet connection and application providers and civil society, to promote education and provide information about the use of computer programs aforementioned in this Article, as well as to promote best practices for digital inclusion of children and teenagers.

 

Art. 30. A defesa dos interesses e dos direitos estabelecidos nesta Lei poderá ser exercida em juízo, individual ou coletivamente, na forma da lei.

Article 30. The protection of the rights and interests set forth in this Act may be enforced individually or collectively, as provided by law.

 

 

Art. 31. Até a entrada em vigor da lei específica prevista no § 2º do art. 19, a responsabilidade do provedor de aplicações de internet por danos decorrentes de conteúdo gerado por terceiros, quando se tratar de infração a direitos de autor ou a direitos conexos, continuará a ser disciplinada pela legislação autoral vigente aplicável na data da entrada em vigor desta Lei.

Article 31. Until the entry into force of the Act specifically provided in § 2nd of Article 19, the liability of the provider of Internet applications for damages arising from content generated by third parties, in the case of infringement of copyright or related rights, continue to be governed by applicable copyright legislation in force on the date of entry into force of this Law.

 

 

 

Art. 32. Esta Lei entra em vigor após decorridos 60 (sessenta) dias de sua publicação oficial.

Article 32. This Act shall entry into force sixty days after the date of its publication.

 

 

 

CÂMARA DOS DEPUTADOS,  25 de março de 2014.

HOUSE OF REPRESENTATIVES,  March 25, 2014.

 

 

 

 

HENRIQUE EDUARDO ALVES

HENRIQUE EDUARDO ALVES

Presidente

President

 


MARCO CIVIL DA INTERNET

(Unofficial English Translation)

FINAL TEXT
DRAFT BILL Nº 2.126-B OF 2011

Sets forth principles, guarantees, rights and obligations for the use of the Internet in Brazil.

The National Congress decrees:

CHAPTER I
PRELIMINARY PROVISIONS


Article 1. This Law sets forth principles, guarantees, rights and obligations for the use of the Internet in Brazil and determines guidelines for operations of the Union, the States, the Federal District and the Municipalities in this regard..

Article 2. The discipline of Internet use in Brazil has as fundamentals the respect for freedom of expression, as well as:

I – acknowledgment of the global scale of the network;

II – human rights, personality development and citizenship exercise in digital media

III – pluralism and diversity;

IV – openness and collaboration;

V – free enterprise, free competition and consumer protection, and

VI – the network’s social purposes.

Article 3. The discipline of Internet use in Brazil has the following principles:

I – guarantee of freedom of expression, communication and expression of thoughts, under the terms of the Federal Constitution;

II – protecting privacy;

III – protecting personal data, as provided by aw;

IV – preserving and safeguarding network neutrality;

V – ensuring stability, security and network functionality, through technical measures consistent with international standards and by encouraging the implementation of best practices;

VI – ensuring that players/agents are accountable according to their activities, as foreseen by law, and

VII – ensuring the participatory/collaborative purpose of the network.

VII - ensuring free business models promoted on the Internet, provided they do not conflict with the other principles established in this Law

Sole paragraph. The principles expressed in this Law do not exclude others in the national legal system relating to the matter, or the international treaties to which the Federative Republic of Brazil is a party.

Article 4. The principles expressed in this Law do not exclude others in the national legal system relating to the matter, or the international treaties to which the Federative Republic of Brazil is a party:

I – to promote every person’s right to access the Internet;

II - to promote access to information, knowledge and participation in cultural life and public affairs;

III – to promote innovation and to foster the widespread availability of new technologies, as well as their use and access; and

IV - to promote open technology standards that enable communication, accessibility and interoperability between applications and databases.

Article 5. For the purposes of this Act, the terms below are defined as follows:

I - Internet: the system comprised of set of logical protocols, structured on a global scale for unrestricted and public use, in order to enable communication of data between terminals over different network;

II - terminal: any computer or device that connects to the Internet;

III - Autonomous System Administrator: a person or legal entity that manages specific blocks of Internet Protocol addresses and their respective autonomous system routing, who is duly registered with the national authority responsible for registration and distribution of IP addresses geographically allocated to the  country;

IV – IP address: code assigned to a terminal connected to a network that enables terminal identification, according to international standards;

V - Internet connection: action that enables a terminal to send and receive data packets over

the Internet, by IP address assignment or authentication;

VI - connection log: a set of information regarding the date and time that the Internet connection begins and ends, its duration and the IP address used by the terminal to send and receive data packets;

VII - Internet application: a set of features that can be accessed by a terminal connected to the

Internet, and

VIII – Record of access to Internet applications: a set of information regarding the

date and time when a specific Internet application was used, from a given IP address.

Article 6. Any interpretation of this Act shall take into account the nature of the Internet, its particular uses and traditions, and its relevance in promoting human, economic, social and cultural development, as well as the fundamental safeguards, principles and objectives set forth herein.

CHAPTER II

 INTERNET USER RIGHTS AND SAFEGUARDS 


Article 7. Access to the Internet is essential to the exercise of citizenship and users are assured the following rights:

I – to the inviolability of intimacy and privacy, guaranteed the right to its protection and compensation for material or moral damages resulting from violation;

II – to the inviolability and confidentiality of communications over the Internet, except when this right is waived by court order, under the terms of the law;

III - to the inviolability and secrecy of private communications storedd, except by court order;

IV – to the non-suspension of Internet connection, except for failure of payments directly related to its use;

V – to the maintenance of quality of the hired of Internet connection;

VI - to clear and complete information contained in the contracts of service, with

details on the arrangements for protecting the connection logs and access records to Internet applications, as well as network management practices that can affect its quality, and

VII - to the guarantee that connection logs, access to Internet applications records and personal data will not be shared with third parties, except upon the user’s express free and informed consent or as provided by law;  

VIII - to clear and complete information on the collection, use, storage, treatment and protection their personal data, which can only be used for purposes which:

a) justified their collection;

b) not prohibited by law, and

c) are specified in service agreements or terms of use of Internet applications.

IX – to express consent on the collection, use, storage and processing of personal data, which should occur prominently from the other contractual terms ;

X – to the definitive exclusion of the personal data you have provided to certain Internet application, and when required, to the termination of the relationship between the parties, except in the cases of mandatory custody records under this Law;

XI – to the publicity and clarity of existent connection providers and Internet application

providers terms/policies of use;

XII - to the accessibility, considering any physical and motor, perceptual, sensory, intellectual and mental characteristics of the user, under the terms of the law; and

XIII - to the application of consumer protection regulations in transactions conducted on the Internet.

Article 8. The guarantee of the right to privacy and to freedom of expression in communications is a condition for the full exercise of the right of access to the Internet.

Single paragraph. Are null and void the contract terms that violate the provisions aforementioned on article 8, such as those that:

I - offend the inviolability and secrecy of private communications over the Internet, or

II - in adhesion contracts, do not offer an alternative to the user-contractor to adopt the Brazilian courts for resolving disputes arising from services rendered in Brazil.

CHAPTER III
THE PROVISION OF CONNECTION AND INTERNET APPLICATIONS


Section I

The Network Neutrality

Article 9. The agent in charge of transmission, switching or routing is obliged to treat any data package with isonomy, regardless of content, origin and destination, service, terminal or application.

 

§ 1st Discrimination or degradation of traffic will be regulated in accordance to the private assignments of the President of the Republic provided in item IV of the Article 84 of the Constitution, to the faithful implementation of this Law, being heard the Internet Steering Committee (CGI) and the National Agency of Telecommunications (ANATEL), and may only arise from:

I – technical requirements essential for the adequate provision of services and applications; and

II – emergency services prioritization.

 § 2nd In the event of discrimination or degradation of traffic referred to in paragraph 1, the aforementioned agent must:

I – refrain from causing damage to users, as regarded in article 927 of the Civil Code;

II – act with proportionality, transparency and equality;

III – inform the users in advance in a transparent, clear and sufficiently descriptive manner to its the management practices and traffic mitigation adopted, including those related to network security; and

IV – provide services on non-discriminatory commercial conditions and refrain from practicing anticompetitive practices.

 § 3rd In the provision of Internet connection, onerous or for free, as well as in the transmission, switching or routing, it is forbidden to block, monitor, filter or analyse the contents of data packets, respected the provisions of this article.

 

Section II
The Protection of Records, Personal and Private Data Communications

Article 10. The record, retention and the provision of Internet connection and access to applications logs, of which this Act refers to, as well as of personal data and the contents of private communications, must meet the conservation of intimacy, private life, honor and image of the parties directly or indirectly involved.

§ 1st The provider responsible for record retention will only be required to provide the aforementioned records, alone or combined with other information that may contribute to the identification of the user or terminal, upon court order, as set forth in Section IV of this Chapter, respecting the provisions of Article 7.

§ 2nd The content of private communications may be made available only by court order, in the case and in the manner provided by law, subject to the provisions of subsections II and III of Article 7.

§ 3rd The provisions of this article do not prevent access by the administrative authorities, holding legal authority for this request, to registry data that inform individual qualification, affiliation and address, as provided by law.

§ 4th The measures and procedures for security and confidentiality must be communicated by the service provider and clearly meet the standards set forth by regulation.

Article 11. Any process of collection, storage, custody and treatment of records, personal data or communications by connection providers and Internet applications providers, in which at least one of these acts occurs in the national territory, shall respect Brazilian law, the rights to privacy, and the confidentiality of personal data, of private communications and records.

§ 1st The provisions aforementioned apply to data collected in the national territory and the content of communications, in which at least one of the terminals is located in Brazil.

§ 2nd The provisions aforementioned apply even if the activities are carried out by a legal person located abroad, provided that services are offered to the Brazilian public or that at least one member of the same economic group has establishments in Brazil.

§ 3rd The connection providers and Internet applications provider shall provide, in the form of regulations, information that allow the verification of their compliance with Brazilian legislation regarding the collection,

custody, storage and processing of data, as well as how the provider respects the privacy and secrecy of communications.

§ 4th Decree shall regulate the procedure for finding violations of the provisions of this article.

Article 12. Without prejudice to other civil, criminal or administrative penalties, violations of the rules laid down in Articles 10 and 11 shall be subject, as appropriate, the following sanctions, applied individually or

cumulatively:

I - warning, indicating the deadline for corrective action

II - a fine of up to ten percent of the gross revenues of the economic group in Brazil in its last financial year, excluding taxes;

III - Temporary suspension of activities involving the acts specified in Article 11 and; or

IV - the prohibition of the exercise of activities that involve the acts referred to in Article 11.

Sole paragraph. In the case of a foreign company, its subsidiary, branch, office or establishment in the country will be jointly and severally liable for payment of the penalties aforementioned

Subsection I
The Guard of Connection Records

Article 13. In the provision of internet connection, it is up to the autonomous system administrator the respective duty to retain connection logs under strict confidentiality, in a controlled and safe environment for one year, under the terms of the regulation.

§ 1st The responsibility for retaining connection logs cannot be transferred to third parties.

§ 2nd The police, administrative authorities or the public prosecutors may require precautionary connection logs to be retained for longer than foreseen in this article.

§ 3rd In the case foreseen in § 2, the applicant authority shall have a period of 60 (sixty) days, from the date of request, to file for a court order to authorize access to the referred records.

§ 4th The provider responsible for record retention must protect the confidentiality of the requests foreseen in § 2, which shall be null if the court order is denied or if it is not filed within the period set forth in § 3.

§ 5th In any circumstances, the availability to the logs plaintiff that is this article object must be preceded by court order, set forth in Section IV from this Chapter.

§ 6th In sanctions application for breach from the provided in this article, the nature and the infraction gravity, the resulting damages, an eventual earned infractor advantage, the aggravating circumstances, the background of the infractor and the recidivism will be considered.

Subsection II
The Guard of Access Records to Internet Applications within Connection Provision

Article 14. In the provision of connection, onerous or gratuitous, is forbidden to retain records of access to Internet applications.

Subsection III
The Guard of Access Records to Internet Applications within Applications Provisions

Article 15. Internet application providers established as legal person exercising this activity in a organized manner, professionally and for economic purposes, must maintain their access logs of Internet applications in confidentiality, in a controlled and safe for six months, under the terms of this regulation.

§ 1st Court order may require, for a given time, Internet applications providers that do not are subject to the provisions set aforementioned in this article, to retain records of access to Internet applications, provided that these records relate to a specific event in that given period.

§ 2nd The police, administrative authorities or the public prosecutors may require that precautionary access logs Internet applications are stored, even for a period longer than foreseen in this article, as set forth in paragraph 3 and 4 of Article 13.

§ 3rd In any circumstances, the provision of records to the requiring party referred to in this article shall be preceded by judicial authorization, as set forth in Section IV of this Chapter.

§ 4th In the application of sanctions for noncompliance with the provisions of this Article, the nature and gravity of the offense, the harm resulting from it, any benefit to the offender, aggravating circumstances, the background of the offender and recidivism shall be considered.

 

Article 16. In the provision of Internet applications, onerous or gratuitous, is forbidden the custody of:

I - Records of other Internet applications without the consent given previously by the data owner, respecting the provisions of Article 7.

II - Personal data that is excessive in relation to the purpose for which consent was given by its data owner.

Article 17. Except in the cases provided for in this Law, the option not to keep records of access to Internet applications does not imply liability for damages resulting from use of these services by third parties.

Section III

Responsibility for Damage Arising from Content generated by a Third Party

Article 19. The provider of Internet connection will not be civilly liable for damages arising from content generated by third parties.

Article 20. In order to ensure freedom of expression and to prevent censorship, the provider of Internet applications can only be liable for civil damages arising out of content generated by third parties if do not take steps, after specific court order, within the framework and technical limits of its services and timely

mentioned, to make the content identified as infringing unavailable, except otherwise established by law.

§ 1st The aforementioned court order, must clearly and specifically identify the infringing content, enabling its unambiguous location, subject to be considered void otherwise.

§ 2nd The application of this article for violations of copyright or related rights depends on specific statutory regulation, which must respect freedom of expression and other guarantees provided for in art. 5 of the Federal Constitution.

§ 3rd Causes that deal with compensation for damages resulting from content on the Internet related to the honour, reputation or rights of personality as well as with the taking down of such content by Internet applications providers may be submitted before special courts.

§ 4th The Judge, including in proceedings set in paragraph 3, may anticipate, totally or partially, the effects the intended protection in the initial request, when unequivocal proof of the fact exists and considered the interest of the community in providing the content on the Internet, provided that the requirements of verisimilitude of the author are present and that the claim of fear of irreparable damage or of difficult repairment is grounded.

Article 20. Whenever available the contact information for the user directly responsible for the content referred in Article 19, the Internet applications provider shall communicate to the user the reasons and information concerning the unavailability of content, with information enabling full legal defense in court, unless expressed in legal provision or in substantiated judicial decision determining otherwise.

Single paragraph. When requested by the user that provided the content made ​​unavailable, the Internet applications provider that performs this activity in an organized, professionally and for economic purposes, shall replace the content made unavailable for the judicial decision that gave grounds for this unavailability.

Article 21. The Internet application provider that delivers content generated by third parties will be secondarily liable for infringement of privacy resulting from disclosure, without consent of its participants, of photos, videos or other materials containing nudity or acts sexual private character when, after receipt of notification by the participant or legal representative, fail to promote, diligently, and within the technical limits of its service, the unavailability of such content.

Single paragraph. The notification referred to in this Article shall, under penalty of nullity, elements that allow for the specific identification of the material identified as infringing the privacy of the participant and verification of legitimacy to the request.

Section IV

Requisition Judicial Records

Article 22. For the purpose of gathering evidence and proof for legal proceedings in civil or criminal areas, the interested party may request a judge an order addressed to the entity responsible for record retention to disclose connection or access to applications logs, on an incidental or standalone basis.

Sole paragraph. Without prejudice to other legal requirements, the court order shall contain, under penalty of inadmissibility:

I – underlying evidence of the offense;

II – detailed reasons for the relevance of the requested records to the investigation or probative use; and

III - the specific period the records refer to.

Article 23. The judge is responsible for taking the necessary steps to ensure the confidentiality of

the records received under custody, and to safeguard the privacy, private life, honor and image of the user. The judge may deem the legal proceedings classified.

CHAPTER IV

 OF THE ROLE OF PUBLIC AUTHORITIES


Article 24. Constitute guidelines for the activities of the Union, States, Federal District and Municipalities in the development of the Internet in Brazil:

I – establishing mechanisms for a multistakeholder, transparent, collaborative, and democratic governance, with the participation of the government, business sectors, civil society and the academic community;

II – the promotion of the rationalization of management, expansion and use of the Internet, with the participation of Internet Management Committee in Brazil;

III - promoting the rationalization and technological interoperability of electronic government services among different governmental bodies to enable information sharing and speedy procedures;

IV - promoting interoperability between different systems and terminals, including among different federal instances and different sectors of society;

V - preferential adoption of open and free technologies, standards and formats;

VI - publicity and dissemination of data and information public in an open and structured manner;

VII - optimization of infrastructure networks and the encouragement of the establishment of centers for storage, management and dissemination of data in the country, promoting the technical quality, innovation and diffusion of Internet applications, without prejudice to the openness, neutrality and participatory nature;

VIII - development of actions and capacity training programs for Internet use;

IX - promotion of culture and citizenship, and

X - provision of public services to the citizen in an integrated, efficient, simplified and through multiple access channels, including remote.

Article 25. The Government’s Internet applications should seek to:

I - compatibility of e-Government services with various terminals, operating systems and  applications to its access;

II - accessibility to all interested parties, regardless of their physical, motor, perceptual, cultural and social abilities in compliance with confidentiality and legal and administrative restrictions;

III - compatibility with human reading as well as automated data processing;

IV – user friendliness of e-government services; and

V – strengthening social engagement in public policies.

Article. 26. The government’s constitutional duty to provide education at all levels of learning includes training combined with other educational practices for the safe, responsible and conscious use of the Internet as a tool for citizenship, and to promote culture and technological development.

Article 27. Public initiatives to promote digital literacy and the Internet as a social tool must:

I – promote digital inclusion;

II - seek to reduce inequalities in access to and use of information and communication technologies, particularly between different regions of the country, and

III - foster national content production and dissemination

Art. 28. The government must design and promote regular studies, as well as set goals, strategies, plans and timelines for the use and development of the Internet in Brazil.

CHAPTER V

FINAL PROVISIONS


Article 29. The user will be free to use software in their terminals to facilitate parental control content, understood by them as unfit to their minor children, provided they comply with the principles of this Law and the Law No. 8069 of July 13, 1990.

Single paragraph. It is for the Government, together with Internet connection and application providers and civil society, to promote education and provide information about the use of computer programs aforementioned in this Article, as well as to promote best practices for digital inclusion children and adolescents.

Article 30. The protection of the rights and interests set forth in this Act may be enforced individually or collectively, as provided by law.

Article 31. Until the entry into force of the Act specifically provided in § 2nd of Article 19, the liability of the provider of Internet applications for damages arising from content generated by third parties, in the case of infringement of copyright or related rights, continue to be governed by applicable copyright legislation in force on the date of entry into force of this Law.

Article 32. This Act shall become effective sixty days after the date of its publication.


Brasília, March 25, 2014.

 

 


[1] See page 15 for English version only.