Marco Civil da Internet completa 10 anos como lei pioneira em direitos digitais

Ten years ago this month, Brazil passed a law that would become a model for the world. The Marco Civil da Internet, signed into law on April 23, 2014, was not a criminal statute. It was something rarer: a foundational civil framework that treated the internet as a space where rights could flourish before rules could constrain them.

The law emerged from an unlikely place—a 2007 article by law professor Ronaldo Lemos warning that Brazil was about to make a mistake. The country was moving toward internet regulation through criminal law, which would have criminalized countless ordinary uses of the network. Lemos proposed something different: establish the principles first, the prohibitions later. That article became a seed. In 2009, his team launched a public consultation, inviting academics, activists, technology companies, civil society organizations, and government representatives to shape what they wanted from the internet. The process took two years. An initial draft went to Congress in 2011 but stalled. After revisions, the final text passed and President Dilma Rousseff signed it into law.

The Marco Civil established four pillars. Net neutrality: internet providers must treat all data equally, without discrimination based on content, origin, destination, or service. Privacy: users have rights to their own information, and companies must obtain explicit consent before collecting or using personal data. Freedom of expression: people can speak online unless they violate others' rights or break the law, in which case only a court can order removal. Provider responsibility: internet companies are not liable for what users post, but they must remove illegal content when a judge orders them to. Beneath these rules lay a larger principle—that the internet should serve economic, cultural, and social development while protecting fundamental rights.

For a decade, the law worked. It enabled streaming services like Netflix to arrive quickly in Brazil. It protected the multiplayer gaming ecosystem. It supported digital innovation while giving law enforcement tools to fight cybercrime. Lemos describes it as a constitution for the network—a balance between competing goods.

But the digital world has moved faster than legislation. Experts now debate what the Marco Civil is missing. Digital rights lawyer Antonielle Freitas points to Article 19, which defines provider liability. The law's language has spawned conflicting interpretations about what counts as a platform and where responsibility ends. She argues the law needs updating to keep pace with how technology actually works. Matheus Puppe, a technology and privacy attorney, notes that Brazil later passed the LGPD, a comprehensive data protection law, which created overlap and confusion. The two laws sometimes pull in different directions. He suggests Brazil needs a broader digital code that can address artificial intelligence, big data, and the Internet of Things—technologies the Marco Civil could not have anticipated.

Lemos disagrees. He argues the law's strength lies precisely in its generality and balance. Proposals circulating in Congress to modify it, he says, would weaken that equilibrium in ways that could cause real harm. Rather than revise the Marco Civil, he believes other laws should build alongside it, following the same participatory model. He is already launching a public consultation called "What Do We Want From AI?"—applying the same inclusive process that created the Marco Civil a decade and a half ago. The question now is whether Brazil's lawmakers will listen to the architect of the original law, or whether they will try to rewrite the foundation itself.