Brazil PL 2338/2023: AI and Synthetic Content Regulation
Definition: Brazil's PL 2338/2023 is a risk-based AI bill that, among other duties, would require identification of synthetic content, with the ANPD positioned to coordinate the national AI authority.
TL;DR: The Senate approved PL 2338/2023 on 10 December 2024; it awaits the Chamber of Deputies, with Deputy Aguinaldo Ribeiro as rapporteur. Article 19 would require a synthetic-content identifier. Penalties run up to 2% of group revenue in Brazil, capped at R$50 million. Treat this as a bill, not enacted law.
What the bill would require
PL 2338 takes a risk-based approach modeled loosely on the EU AI Act, with transparency duties that include identifying synthetic content under Article 19. A machine-readable mark on AI output is the natural mechanism, mirroring the marking obligations emerging elsewhere.
Status and who coordinates
The Senate approved the bill on 10 December 2024 and it moved to the Chamber of Deputies, where Deputy Aguinaldo Ribeiro serves as rapporteur. The ANPD, Brazil's data protection authority, is positioned to coordinate the national AI system. Because the text can still change, plan around the direction, not the exact wording.
Preparing now
A provider already marking output for Article 50 is largely prepared for Brazil's synthetic-content identification duty. The same signed manifest and watermark satisfy the identification requirement; the work is tracking the final text and the ANPD's implementing rules.
The incident behind this
Brazil's Article 19 synthetic-content identifier requirement reflects the same concern driving the EU and California: voters and consumers need a reliable signal that content is AI-generated.
Regulatory mapping
| Regime | Effective | Bite | Why it applies |
|---|---|---|---|
| Brazil PL 2338/2023 (bill) | Senate-approved 10 Dec 2024 | Up to 2% group revenue, cap R$50M | Synthetic-content identification |
FAQ
Is PL 2338 law yet?
No. The Senate approved it; the Chamber of Deputies has not finalized it. Treat requirements as proposed until enacted.
Where Original Pictures stands today
Original Pictures ships three things today: a Sign API, a Verify API, and the SDKs that wrap them. One POST /v1/sign attaches a C2PA-format manifest, an invisible TrustMark watermark, and an OpenTimestamps anchor. The open-source verifier checks any of it without calling us.
Two things are on the near roadmap, and we name them as roadmap, not as shipped: C2PA Conformance Program recognition (target Q3 2026, until then our manifests use the published C2PA v2.2 format and any C2PA-aware validator can read them, but third-party validators will show our signer as not-yet-listed), and a consumer capture app (Q3 2026). We do not sell a capture SDK, and we do not claim Trust-List membership we do not yet hold.
Bottom line: Brazil is heading toward synthetic-content identification under PL 2338. Reuse your Article 50 marking pipeline and watch the Chamber and the ANPD for the final text.
Related
Original Pictures is progressing through the C2PA Conformance Program; our signing certificate is not yet on the official C2PA Trust List. Target: Q3 2026. We will not describe ourselves as "C2PA-certified" until it is true.
Original Pictures provides content-provenance infrastructure. It does not by itself constitute legal compliance with the EU AI Act or any other regime; compliance depends on how you deploy it, your disclosures, and your governance. Figures are drawn from public reporting, verify against primary sources before citing in regulated materials. Nothing here is legal advice.
Last verified 2026-05-25. Author: Mahdi Kazempour, Founder, Original Pictures.