What is Bill 2338/2023?

The project proposes a legal framework for artificial intelligence in Brazil, with system classification based on risk.

Definition

PL 2338/2023 is the bill that proposes the legal framework for artificial intelligence in Brazil, including the rights of affected individuals, classification of systems by risk level, governance obligations for developers and users, and a national system for regulation and oversight.

The project follows the logic of AI Act European: prohibits some excessively risky applications, imposes impact assessment, documentation and human oversight on high-risk systems, and requires transparency in the use of AI with people.

Where is the project located?

O PL 2338 / 2023 It was presented by the Federal Senate in 2023 and is currently being processed in the National Congress; the text may change before it is sanctioned. While there is no specific law, the LGPD It already regulates the use of personal data in AI systems, including the right to review automated decisions (Article 20), and the ANPD acts on the subject within the scope of its competencies.

In practice

Inventory the AI systems used and developed by the organization, their purpose, and the target audience.
Classify the risk using the criteria of the PL and AI Act, which converge.
Document impact assessment, training data, testing, and human supervision.
Treat AI governance as an extension of the privacy program, not as a separate project.

How Privacy Tools it deals with the topic

The module of AI Governance maintains the inventory, risk classification, and controls required by PL 2338/2023 and the AI Act; Diagnoses and Assessments They apply algorithmic impact assessment.

Updated October 3th, 2026.

Want to see this concept applied in practice?

Request a demo and see how... Privacy Tools It organizes mapping, legal bases, rights holder applications, and evidence all in one place.