Freedom on the Net 2016 - Brazil

Key Developments, June 2015-May 2016

• Popular communication application WhatsApp was temporarily blocked on two occasions during this period, in December 2015 and May 2016, after Facebook, which owns the encrypted messaging service, was unable to comply with requests to turn over data pertaining to users under criminal investigation. While higher courts quickly overturned these orders, they disproportionally impacted users across Brazil (See Blocking and Filtering).

• Some of the largest internet service providers in Brazil announced that they would introduce data caps for fixed broadband, prompting widespread outrage and several bills in Congress to limit practices that are deemed to be unfair to consumers (See ICT Market).

• A report by a Parliamentary Investigation Commission proposing a series of cybercrime bills caused significant backlash among civil society and scholars (see Legal Environment).

• Since the adoption of the so-called "Constitution for the Internet" in April 2014, secondary legislation enacted in May 2016 further refined rules for net neutrality and security measures regarding connection logs stored by providers (see Legal Environment).

Introduction:

Brazil's internet freedom environment declined during this period, as decisions by regional judges to temporarily block WhatsApp disproportionally affected users across the country.

Hailed as a civil rights framework for the internet, Brazil's Marco Civil Law (Marco Civil da Internet) contains key provisions governing net neutrality and ensuring strong privacy protections. In May 2016, right before the beginning of impeachment procedures that suspended President Dilma Rousseff from office, a decree regulating the Marco Civil further clarified rules concerning the scope of application of net neutrality, as well as security measures to be adopted by providers for collecting and storing connection logs. However, despite boasting some of the most progressive and comprehensive legislation on digital rights, internet freedom in Brazil remains constrained by violence against independent bloggers, criminal defamation laws, restrictions on anonymity, and restrictive limits on content related to elections.

Several orders to block WhatsApp have especially raised concerns about an ongoing judicial trend within the country, and draw attention to unforeseen effects of Marco Civil enforcement. Both temporary blocking orders in December 2015 and May 2016 were linked to ongoing requests to turn over information as part of criminal investigations by the police. WhatsApp has repeatedly argued that it cannot provide information it does not have, especially because it encrypts messages and does not store them on its servers. While both decisions were quickly overturned by higher courts, digital rights advocates have criticized this trend as a disproportionate misinterpretation of the Marco Civil, which includes a sanction of "temporary suspension of activities" for providers that violate Brazilian law. Brazilian authorities have repeatedly clashed with WhatsApp over access to user data, even leading to the arrest of the Latin American Vice President of Facebook, which owns WhatsApp, in March 2016.

Concern also grew that Congress may pass laws that could change key aspects of the Marco Civil. In March 2016, a report by a Parliamentary Inquiry Commission proposed a package of cybercrime bills which threatened to undermine several privacy rights in favor of wider powers for criminal investigators, and erode the Marco Civil's judicial notice and takedown system. While several of the initial points were dropped after significant backlash from civil society and activists, the final proposals approved by the commission in early May continued to generate debate among digital rights activists.

On the other hand, while internet penetration rates have been increasing modestly, social media and its potential for mobilization has taken center stage in Brazil. Issues that have garnered particular interest in discussions on social media over the past year range from concerns surrounding the Zika epidemic and its public health consequences, especially in the lead-up to the 2016 Rio Olympics,^[1] to polarized debates surrounding the political and economic situation. Online discontent over corruption scandals are often taken to the streets, as protests reached record levels in March 2016.^[2]

Obstacles to Access:

Although internet and mobile penetration rates have increased steadily in Brazil, significant regional disparities in access persist. Three of the largest ISPs in Brazil caused uproar when they announced data caps for fixed broadband by 2017, and several bills proposed to limit such practices. Millions of users were also affected when the messaging service WhatsApp – the most popular communication app in Brazil – was blocked on two occasions during this period of coverage.

Availability and Ease of Access

Despite economic growth in recent years, Brazil's access rates remain below average compared to many North American and European countries. The International Telecommunications Union (ITU) estimates that Brazil's internet penetration rate reached 59 percent in 2015, compared to 55 percent in 2014 and 51 percent in 2013.^[3] According to the Center of Studies on Information and Communication Technologies (CETIC), some 50 percent of households did not have access to the internet as of March 2015, an improvement from 60 percent in 2013.^[4] Various obstacles continue to prevent many households from accessing the internet, such as high prices – a problem that extends to fixed broadband, wireless, and 3G and 4G technologies – and persistent social inequalities. A significant digital divide and disparities in infrastructure are evident between various geographical regions, as well as between urban and rural areas.

According to the Brazilian Institute for Geography and Statistics, 31 million households had internet access in 2015, accounting for 49 percent of the population. Of these, 98 percent connected via broadband and only 2 percent had dial-up connections.^[5] Data from the National Telecommunications Agency (ANATEL) shows a fixed-broadband subscription penetration of around 12 percent at the beginning of 2016.^[6] By the end of 2015, Akamai measured Brazil's average internet connection speed at 4.1 Mbps, up from 3.4 Mbps in the first quarter of 2015.^[7]

Although household access is one of the most common means of connection for those with slightly higher incomes, LAN Houses (public paid access centers) remain relevant to digital inclusion in Brazil, particularly in the country's impoverished northern regions.^[8] Legislative initiatives such as the bill on "Centers for Digital Inclusion" consider LAN Houses as "public interest facilities," in line with existing internet access strategies implemented by the Ministry of Telecommunications in the past years.^[9] While national wireless networks are still small compared to other countries, ANATEL registered over one million hotspots in Brazil as of July 2015.^[10]

Mobile penetration has grown significantly over the last few years and mobile broadband connections have quickly become a dominant means for Brazilians to access the Internet.^[11] Overall, mobile penetration rates increased from 88 percent in 2009 to 126 percent (or around 259 million phone subscriptions) by the end of 2015. However, the number of subscriptions has decreased over the past year, falling from 281 million (or 139 percent) in 2014, according to ITU data.^[12] This drop has been attributed to Brazil's economic crisis and stricter credit policies imposed by operators.^[13]

The supply of smartphones with 4G services has significantly increased since its introduction in April 2013, but high prices and limited network still constitute challenges. As of May 2016, nearly 135 million users (approximately 48 percent) had 3G services.^[14] According to the consultancy company Teleco, Brazil had 36.5 million active 4G subscriptions by May 2016, representing an increase of approximately 208 percent compared to the same period as of May 2015.^[15] Such advanced internet services, however, are heavily concentrated in wealthy urban centers such as São Paulo.^[16]

Brazil's federal government has been implementing a number of internet expansion and improvement programs since 2010, including the National Broadband Plan (Plano Nacional de Banda Larga or PNBL).^[17] According to statistics from the Brazilian Telecommunications Association, broadband connections increased by 308 percent between October 2014 and October 2015.^[18] The government estimates that 94 million individuals gained broadband access since the adoption of PNBL in 2010.^[19] But specialists have criticized these figures; after almost four years, only 1.8 million (7.9 percent) of the 23 million fixed broadband subscriptions were contracted through PNBL. PNBL covered only 0.6 per cent (800,000) of the total 128.5 million individuals who accessed mobile internet.^[20]

A Special Taxation Regime (REPNBL)^[21] has sought to complement the PNBL by encouraging investment in existing telecommunications networks to expand broadband and mobile internet capabilities and offer internet access to the population at equitable prices, coverage and quality.^[22] Under this initiative the Ministry of Communications and mobile companies have launched projects in 2015 to improve high-speed internet access in rural areas of the country.^[23] In February 2013, Decree 7.981/2013 established tax incentives for the ICT sector by exempting certain categories of smartphones from taxation, namely those produced with national content, Wi-Fi connectivity, email access, and open source code for developers.^[24]

Restrictions on Connectivity

The government does not place limits on bandwidth, nor does it impose control over telecommunications infrastructure. There have been no reported instances of the government cutting off internet connectivity during protests or social unrest. However, millions of users were temporarily unable to access messaging service WhatsApp after its parent company Facebook did not comply with information requests as part of criminal investigations (see Blocking and Filtering).

Most of the backbone infrastructure for the internet is privately owned in Brazil. In 1998, the state-owned company Embratel, which was responsible for building the internet backbone, was privatized and acquired by the U.S. company MCI; it was later acquired by the Mexican telecom América Móvil in 2003. Over the past decade, private backbone infrastructure, such as that of Embratel, GVT and Oi, has expanded in Brazil. With the PNBL, however, Brazil is expected to expand government-owned infrastructure – including underutilized fiber-optics – to allow for low-cost connections. The significant increase in wired broadband subscriptions from 2010 to 2013 is at least somewhat attributable to the expansion of the state-owned backbone. Since the PNBL was initiated, over 612 Brazilian municipalities, which contain around 40 percent of the population, received service from the state-owned Telebras network.^[25]

Internationally, undersea cables connect to Brazil from North America and Europe. Brazil has announced plans to create new undersea cable connections with South Africa and the Caribbean, as well as Portugal. Some of the impetus for building these connections is related to a desire to avoid reliance on U.S. infrastructure after revelations of pervasive U.S. spying on Brazilians in 2013.^[26]

In 2004, the Brazilian Internet Steering Committee (CGI.br) launched an initiative called PTT Metro to create internet exchange points (IXPs) across Brazil, starting with their first IXP in São Paulo. As of April 2013, there were 22 IXPs in operation, covering 16 of Brazil's 26 states.^[27] Currently, Brazil has at least 25 IXPs installed in the country.^[28]

ICT Market

Although there are no significant legal or economic barriers for companies competing in the ISP, mobile, or digital technology sectors, the Brazilian ICT market is highly concentrated. As of May 2016, three large private companies – Oi, Claro and Vivo (Telefônica Brasil) – represented over 84 percent of the country's broadband market.^[29] In January 2014, the Brazilian competition authority approved the merger of Oi and Portugal Telecom into CorpCo. This merger was completed in 2015 and ranked CorpCo as the leading telecommunication company in Portuguese-speaking countries worldwide.^[30] Also in 2014, the acquisition of Vivendi's GVT by Telefônica Brasil resulted in a merger of two of the country's larger broadband services in 2016 – GVT and Vivo – further contributing to market share concentration.^[31]

By mid-March 2016, Vivo, Claro and Oi announced that fixed broadband internet would operate under a limited data cap business model by the beginning of 2017, similar to measures adopted for mobile internet access.^[32] This announcement caused widespread uproar among users, politicians and internet-dependent businesses,^[33] since broadband internet in Brazil has been consistently regarded as costly and of low quality.^[34] ANATEL's then-president João Rezende addressed the controversy by supporting the decision and blaming users for high usage of bandwidth. However, ANATEL subsequently prohibited all major ISPs from adopting such measures for 90 days until they provided detailed motives. Several bills also proposed to limit such practices that are deemed to be unfair to consumers,^[35] including one legislative proposal from a petition that gathered over 20,000 signatures within two weeks.^[36]

According to the most recent data regarding Brazil's mobile market in May 2016, four large private companies – Vivo, TIM, Claro, and Oi – held 96 percent of the market.^[37] Such high market concentration could make it very difficult for other providers such as Algar and Nextel to compete in the mobile sector.^[38] Despite such concentration, Brazil has the largest smartphone market in Latin America.^[39]

Regulatory Bodies

Two regulatory agencies oversee Brazilian ICTs: the Brazilian Agency of Telecommunications (ANATEL) and the Administrative Council for Economic Defense (CADE), an antitrust agency that is focused on reviewing mergers and anticompetitive practices in telecommunications markets. Additionally, in 1995 the government created the Brazilian Internet Steering Committee (CGI.br), a multi-stakeholder independent organization in charge of coordinating and integrating all internet service initiatives in Brazil, as well as promoting technical quality, innovation, and the dissemination of services. Provisions in Marco Civil mandate that the government consult with CGI.br, and in various instances directly involve the Committee, in the policy-making and implementation of Marco Civil processes.^[40]

ANATEL is administratively and financially independent, and not hierarchically subordinate to any government agency. Its decisions can only be appealed in courts. From the Ministry of Communications, ANATEL has inherited the powers of granting, regulating, and supervising telecommunications in Brazil, as well as much of its technical expertise and other material assets. While both ANATEL and CGI.br are entrusted with ensuring the free, fair, and independent operation of ICTs, the General Telecommunications Act also empowers CADE to issue decisions on matters such as price setting and collusion.^[41] In May 2012, the new Brazilian Antitrust Act (Law No. 12.529 of November 30, 2011) came into force, introducing a pre-merger control regime in Brazil. Under this act, mergers must have pre-approval by CADE before they can proceed. The act also expands CADE's substantiv e enforcement power regarding cartel and unilateral business practices that affect competition as well as consumer rights and benefits.^[42]

CGI.br is formed by elected members from government, the private sector, academia, and nongovernmental organizations. CGI.br's contributions include comprehensive and reliable annual reports on internet use in Brazil, funding for internet governance-related research, and the promotion of conferences such as the annual Brazilian Internet Governance Forum, and the international Net Mundial conference, which was organized in Brazil in 2014.^[43] In June 2009, CGI.br declared the "Principles for the Governance and Use of the Internet," which include the goals of online freedom, privacy, human rights, and net neutrality as a base for the Brazilian information society.^[44] Many of these principles were adopted into Brazilian law through the Marco Civil in 2014.

Limits on Content:

Several orders to block WhatsApp have raised concerns about an ongoing judicial trend within the country. While content removal requests filed before local courts continue to pose significant challenges to social media companies in Brazil, a notice and takedown provision in Brazil's Marco Civil Law has clarified intermediary liability. Brazilians' use of social media tools for civic action and activism continues to increase, particularly in the wake of the intense protests against and in favor of Dilma Rousseff's government and anti-corruption demonstrations that took place through 2015 and early 2016.

Blocking and Filtering

In keeping with the country's push to modernize and expand access to ICTs, Brazil's digital information landscape remains largely unrestricted. There are no proven indications that Brazilian authorities are filtering messages or engaging in widespread blocking online. Brazilians freely gather and disseminate information via the internet and mobile phone technologies. They have access to a wide array of national and international news sources, blogs, social networking platforms, and citizen journalism, the latter of which has proliferated over the past year.

Social networks, communication apps, and video-sharing websites such as Facebook, Twitter, and YouTube are – for the most part – freely accessible and widely used in Brazil. On two occasions during this coverage period, however, telecom companies were ordered to temporarily block the popular communication tool WhatsApp after failure to comply with information requests in criminal investigations.

• On December 16, 2015, a lower court in the state of São Paulo ordered wireless carriers to shut down WhatsApp for 48 hours, because the company did not cooperate with a criminal investigation. The decision was overturned 12 hours later through a temporary injunction issued by the Court of Justice in the state of São Paolo, following an appeal by the company.^[45]

• On May 2, 2016, a judge in Sergipe state ordered operators to block WhatsApp for 72 hours.^[46] Similarly, the decision was linked to WhatsApp's failure to comply with a court order to access users' messages for the purpose of a criminal investigation linked to drug trafficking in the city of Lagarto. Earlier in March, the same judge had ordered the arrest of Facebook's Vice-President in Latin America, Diego Dzodan, as a means of coercing the company into obeying its request (See "Prosecutions and Detentions for Online Activities"). A different judge from the state court cancelled the ruling the next day, following an appeal by WhatsApp's lawyers.^[47]

• In a more recent instance on July 19, 2016,^[48] a judge ordered providers to block WhatsApp for an indefinite period of time, again for not turning over requested information sought in the course of a criminal investigation. The Brazilian Supreme Court overturned the measure later that day through a preliminary injunction, stating that "the suspension of the service apparently violates the basic principle of freedom of expression and communication, enshrined in the Constitution, as well as prevailing legislation on the matter."^[49]

Another order was issued prior to this period, in February 2015, but it was suspended and the application was not blocked.^[50] The decisions to block the app were based on Marco Civil's statutory provisions, notably Article 12 which provides for the "temporary suspension of activities" of connection providers and internet application providers that violate Brazilian law, including the right to privacy, the protection of personal data, and the secrecy of private communications. Digital rights specialists have argued that these decisions were not only disproportionate, but also constituted a misinterpretation of the law, notably because it does not specifically mention the suspension of applications or services.^[51]

On the other hand, these temporary shutdowns have added fuel to the public debate around law enforcement's ability to access tech companies' encrypted data. WhatsApp has repeatedly argued that "we cannot provide information we do not have," because it encrypts messages locally and does not store them on its servers. Especially since expanding end-to-end encryption for all users' communications in April 2016, WhatsApp has insisted that such requests to turn over information are technically impossible.^[52] While millions of users were affected by these decisions, WhatsApp's main competitor, Telegram, gained over seven million new users from Brazil within 24 hours in May 2016,^[53] in turn highlighting the significant repercussions for businesses within the country.

Content Removal

While the enactment of Marco Civil has been hailed as a progressive landmark for internet governance, certain legal provisions criminalizing defamation and blasphemy and restricting speech around elections continue to put some constraints on internet freedom online. Brazil's controversial Electoral Act of 1997 has faced intense scrutiny particularly because its broad terms harbor the potential to constrain freedom of expression both online and offline, as it continues to limit certain content deemed to be injurious to candidates during electoral periods. An amendment to the law in 2013 created new and specific restrictions to online content concerning candidates and political parties.^[54]

These restrictions on content resulted in the state issuing hundreds of content-removal requests in late-2014 and early-2015. After the electoral period ended in Brazil, companies reported a considerable reduction in content removal requests, highlighting the Electoral Law's impact on state-initiated censorship in Brazil. Removal requestsissued to Twitter almost halved in July to December 2015 compared to the previous year. From July to December 2015, Twitter received 15 removal requests from Brazilian courts. The company withheld a total of 107 tweets and 1 account from view in Brazil.^[55] But with municipal elections scheduled for October 2016, such requests threaten to proliferate again.

Lawsuits have also led Brazilian courts to ban some individuals from posting online in certain cases.^[56] Blogger Marcelo Auler was requested to remove several articles published on his website between November 2015 and April 2016, after they were found to contain accusations that harmed the reputation of police officers involved in overseeing investigations into the "car wash" (Lava Jato) corruption scandal. He was also prohibited from publishing future reports that "could be interpreted as offensive to the officers."^[57] The rulings of the federal courts of state of Paraná have been strongly criticized for establishing a "prior censorship" measure constraining any future content published by the blogger.^[58]

Brazilian law also limits certain online content through cybercrime legislation. The "Azeredo Act" was enacted in November 2012 after major changes to its original, highly controversial proposal.^[59] In its final form, it establishes the creation of specialized teams and sectors structured by the judicial police to fight against cybercrimes and to take down racist content (other defamatory content is not directly covered by the act). In the case of cybercrimes and racist content, takedowns require a judicial notice, but can be issued before police investigations have begun.^[60]

Intermediary liability issues have been settled by a case law established by the Brazilian Superior Court of Justice (STJ) and by statutory provisions enacted by Marco Civil in 2014, which establishes that internet providers shall not be held liable for civil damages resulting from content created by third parties, and that application providers will only be held liable for civil damages resulting from content generated by third parties should they refuse to follow a court order requesting specific removal of said content.^[61] In recent years, case law was slowly built around a similar understanding, with the Brazilian STJ ruling towards a judicial notice-and-takedown model.^[62] Exceptions were made for copyright infringement and "revenge porn," such as dissemination of sexually explicit photos or videos without the consent of the individual appearing in them. In cases pertaining to revenge porn, a court order is not required for content removal, and the user's notification alone is enough to make the intermediary liable should it refuse to make the content unavailable in a short time.^[63]

Between late 2015 and early 2016, courts rejected several requests pertaining to intermediary liability and filtering of content. In both cases, intermediaries were requested to monitor and filter certain keywords and content deemed to be economically harmful to specific enterprises, such as bad reviews or massive social gatherings in shopping malls organized through social media. Courts argued against such requests, based on constitutional rights to freedom of expression and on Article 19 of the Marco Civil,^[64] as well as freedom of expression and access to information established by Articles 2, 3 and 4 of the Law.^[65]

On the other hand, the STJ ruled in March 2015 that news providers are liable for failing to preventively control offensive posts by their users. Judges held that, unlike technology companies such as Google and Microsoft, news portals have a duty to ensure that their platforms are not employed to disseminate defamatory content or violations of the privacy and intimacy of third parties, since their primary activity is providing accurate information to the public.^[66] Although there were no reported charges against media organizations based on this precedent, the ruling may encourage online newspapers and other media to preemptively delete their comments sections to avoid liability.

Although ISPs are not responsible for prescreening content, the STJ consolidated a number of precedents establishing that intermediaries must comply with court-issued notice and takedown requests within 24 hours.^[67] Accordingly, in a June 2014 case, the court issued a decision ordering Google to compensate a user of the former Orkut social network (previously owned by Google) for moral damages, since the company did not immediately comply with an order to remove defamatory content related to false accounts in her name.^[68] Although two bills to create a so-called "right to be forgotten" were proposed in Brazil's Congress, by which search engines would be required to remove links to personal data upon requests by users, legislative proposals had yet to be brought up for debate.^[69]

Media, Diversity, and Content Manipulation

As of January 2016, over 99 million Brazilians had active Facebook accounts and 88 million were using the social network via mobile technology.^[70] Blogs and social networking platforms have become important instruments for citizen journalists and others to access information, defend civil rights, and express political points of view. Brazilians can read news from national and international sources, without government restriction. Within such a diverse media landscape, some content providers are neutral and others show bias towards or against the government.

Although self-censorship is less pervasive in Brazil than in some neighboring countries, the ongoing use of threats, intimidation, and violence against online journalists and independent bloggers in certain areas of the country has contributed to pockets of self-censorship (see Intimidation and Violence).^[71]

New blogs in Brazil have no significant difficulty in maintaining themselves online. The Brazilian government has a past history of collecting high taxes on any service, thus bringing the costs of internet and host providing services slightly higher than the international average.^[72] There are no sanctions for not following a specific editorial orientation. According to Article 19 of Marco Civil, website owners can only be held liable for content generated by third parties if, after specific judicial order, they do not comply with the requested measures in a timely manner.^[73]

Ever since the approval of the Marco Civil, the principle of Network Neutrality has been incorporated into Brazilian law. Enacted in May 2016, a new decree regulating the Marco Civil solidified the rules that prohibit the discrimination or degradation of traffic for commercial purposes while permitting it for emergency and public calamity situations.^[74] Zero-rating and Facebook's Free Basics program^[75] are thus considered to be barred by this new legislation, and any notice of violation of said principle by companies may be investigated and sanctioned.^[76] However, zero-rating is still a common practice among larger mobile internet companies.^[77]

Digital Activism

Social media platforms such as Facebook and Twitter continue to play a central role in civic activism in Brazil. Following a historically tight presidential election in 2014, general frustration over the economy and a massive corruption scandal involving the state-run oil company has contributed to widespread discontent with the government since late 2014. Catalyzed by social media, massive protests in early 2015 brought millions of citizens to the streets to express their political positions, both for and against the government in office.

New protests brewed with the development of a criminal investigation involving the former president Luiz Inácio "Lula" da Silva and the suspension of President Dilma Rousseff from office. In March 2016, Brazil had one of its largest demonstrations, attracting over six million citizens to city streets all over the country, asking for Rousseff's impeachment.^[78] All major groups involved in the protests, such as "Movimento Brasil Livre" and "Vem Pra Rua," had very active profiles on social media, which have been crucial to the wide publicity around the demonstrations. On the other hand, the movement in favor of President Rousseff was also supported by social media platforms, with demonstrations all around the country.^[79]

Citizen activism, however, is not merely limited to organizing street protests. Citizens increasingly engage with formal government platforms to express opinions and shape the design and implementation of legislation. For example, the regulation phase of Marco Civil has been marked by high levels of public consultation and democratic participation online – elements that were also present during the drafting of the original legislation. The Ministry of Justice launched the second phase of a public consultation in January 2016 to assess views from citizens, academics, businesses and civil society organizations, concerning the first draft regulation of the Marco Civil. The platform garnered more than 1,500 comments and contributions within 30 days, with roughly 10,000 visits in total. During the first phase of the debate the platform received more than 60,000 visits and close to 1,200 comments.^[80]

Brazil is also a founding member of the Open Government Partnership – a global effort to increase transparency and accountability – and, as part of this effort, has significantly improved standards of access to public information in recent years, establishing a system whereby citizens are entitled to request information through an electronic system.^[81]

Violations of User Rights:

Brazil's Marco Civil Law established a framework for internet users' rights, but other legal provisions – such as criminal defamation laws and those restricting certain speech during elections – contribute to a legal environment where individuals can face prosecutions for what they write online. High levels of violence in Brazil's urban centers, coupled with impunity for many crimes, have contributed to one of the highest rates of violence against journalists in the region. In addition to attacks on print and broadcast journalists, at least two bloggers were killed between June 2015 and May 2016.

Legal Environment

Although Brazil adopted some of the most progressive legislation in the world related to internet governance with the enactment of Marco Civil, several competing legal provisions, such as laws criminalizing defamation and blasphemy and restricting speech around elections, continue to threaten users' rights online (see "Content Removal").

The Brazilian Federal Constitution forbids anonymity but protects freedom of the press and freedom of speech, including cultural and religious expression.^[82] Brazil made noteworthy progress in establishing a foundation for internet user rights with the passage of the Marco Civil Law, a so-called "Constitution for the Internet," signed into law in April 2014.^[83] The groundbreaking legislation establishes the right to freedom of expression online, offers detailed privacy protections pertaining to personal data, guarantees net neutrality, and promises to uphold the participatory nature of the internet. On May 11, 2016, during her last hours in office before the impeachment process that suspended her from power, Dilma Rousseff signed into law the decree regulating the Marco Civil law.^[84] The decree contains specific rules regarding net neutrality (see Media, Diversity, and Content Manipulation) and data protection measures (see Surveillance, Privacy, and Anonymity).

Nevertheless, Brazil continued to see instances of local officials bringing charges of defamation – which is a crime punishable by six months to two years in prison or a fine according to the penal code – against bloggers and online journalists.^[85] In October 2014, Article 19, a civil society organization, launched a campaign in Brazil to press for the decriminalization of defamation.^[86]

Brazil has a long history of laws that combat discriminatory speech. Although people are rarely charged or imprisoned for racist or discriminatory speech, Brazilian law establishes penalties ranging from two to five years in prison for practicing or inciting discrimination based on race, ethnicity or religion in the media or in other publications.^[87] The "Azeredo Law," passed in November 2012, extended these penalties to online speech.^[88] The Criminal Code further outlines punishment for vilifying or mocking religion, with penalties ranging from one month to one year in prison, although it is unclear whether these penalties have been applied online. In June 2015, representatives introduced a legislative initiative to Congress that seeks to increase the penalty for vilifying religion to four to eight years in prison.^[89]

In April 2013, a Brazilian cybercrime law commonly referred to as the "Carolina Dieckmann Law" came into force. Nicknamed after actress Carolina Dieckmann, this legislation took center stage after nude photos of her were distributed online in early 2012.^[90] The law criminalizes breaches of digital privacy such as computer intrusion, the "installation of vulnerabilities," and editing, obtaining, or deleting information – including credit card numbers – without authorization. The distribution, sale, production, or offer of programs or devices meant to facilitate these actions, or to interrupt ICT services, are also categorized as crimes. Associated punishments vary from fines to up to five years imprisonment.

In March 2016, significant criticism also surrounded the approval of a report by a Parliamentary Inquiry Commission, which proposed a series of bills related to cybercrimes. The bills included changes to the original text of the Marco Civil, and were seen by civil rights activists as a threat to freedom of expression, privacy and several other digital rights.^[91] On May 4, 2016, the Parliamentary Commission adopted the final report with 17 votes in favor and six against.^[92] While some of the initial proposals were dropped after significant backlash from civil society and activists, several of the six remaining bills continued to raise concerns among digital rights activists, including a proposal that would enable courts to order the blocking of websites and applications hosted outside the country that are primarily dedicated to crimes punishable with a minimum sentence of two years imprisonment (although the final text clarified that instant messaging apps such as WhatsApp would not be subject to blocking). Another proposal included broadening the scope of the computer intrusion crime under the "Carolina Dieckmann Law," which would punish any form of unauthorized access into a third-party device.^[93]

Prosecutions and Detentions for Online Activities

Prosecutions for defamation continue to pose a threat to freedom of expression online in Brazil. In April 2014, the blogger Paulo Henrique Amorim was convicted of defamation for insulting Merval Pereira, a journalist for O Globo , whom he called a "bandit journalist." Although originally convicted to serve jail time, Amorim's jail sentence was commuted in favor of a fine of ten times the minimum salary to be paid to a public or private social impact institution. Amorim's lawyer stated that her client would appeal the decision.^[94] More recently in July 2015, blogger Paulo Cezar de Andrade Prado was arrested after the president of a local soccer club filed a complaint against him. During the investigation, police reportedly found that he had not served a previous criminal defamation conviction for criticizing a lawyer in a blog post and calling him incompetent. As a result, he was sent to jail for four months.^[95]

In the midst of ongoing tensions between WhatsApp and Brazilian law enforcement, Facebook's Vice-President in Latin America, Diego Dzodan, was arrested and briefly detained on March 1, 2016. A judge in the state of Sergipe issued the order, after the company did not comply with multiple requests to hand over WhatsApp user data linked to an organized crime and drug trafficking case. The judge had imposed fines of around US$ 12,500 and then US$250,000 to Facebook, which stated that its use encryption on the app's messages made compliance with the order virtually impossible. As Dzodan later defended, "The way that information is encrypted from one cellphone to another, there is no information stored that could be handed over to authorities."^[96] The detention did not last long, as a higher instance judge ordered Dzodan's release the following day.^[97] In May 2016, however, the same judge involved in this case ordered the blocking of WhatsApp for 72 hours (see Blocking and Filtering).

Surveillance, Privacy, and Anonymity

The Brazilian Constitution explicitly forbids anonymity.^[98] Although in practice, anonymous speech online is common, judges have occasionally referred to the constitution as a basis for limiting certain instances of anonymous speech. Other judges, however, have upheld anonymous speech on the grounds that it is important for free expression and privacy, ruling that anonymous posts online are protected as long as it is possible to technically trace the speech through IP addresses. The Brazilian Superior Court of Justice (STJ) has held that identification through IP address is a "reasonably effective means for identification" and corresponds to "average diligence" expected from internet providers.^[99]

Several legal provisions also place restrictions on anonymity in Brazil. Real-name registration is required for individuals or legal entities in order to purchase mobile phones or to access private internet connections, although the use of pseudonyms in discussion forums across the web is quite common. Lawmakers have urged further restrictions on anonymity with regard to public access points such as LAN houses, suggesting that internet communications should be recorded in order to prevent cybercrimes. Several pieces of legislation of this kind already exist in São Paulo^[100] and Rio de Janeiro,^[101] and a bill under debate in the Senate would require LAN houses to register all users and keep a directory of individual identification for an unspecified amount of time.^[102] The Marco Civil requires internet service providers such as LAN houses to confidentially store connection records in a safe, controlled environment, for at least one year following the provision of the service.^[103] Perhaps the most restrictive legislative proposal during this coverage period was introduced in July 2015, seeking to amend Marco Civil to require users to register their real-name and national registration number to post on social media or blogs.^[104] Although the project was rejected in December 2015, it serves as an example of the significant tensions surrounding anonymity in Brazil.

Facebook's Government Requests Report states that between July and December 2015, the company received 1,655 requests for data related to 2,673 separate accounts and produced data for 41 percent of these requests.^[105] Brazil consistently figures among the list of countries that send the most requests for user data to Google and Twitter, following the United States and Japan.

Marco Civil Law treats privacy and data protection as fundamental rights, bans the disclosure of users' personal data to third parties – with the exception of police and judicial authorities – and requires providers to make privacy policies and terms of use clear and understandable.^[106] Digital rights activists had raised some concerns about Marco Civil's data retention mandate, which imposes obligations on internet connection providers to keep records of theirs users' connection logs for 12 months, and for application providers to keep records of access for 6 months.^[107] Regulations decreed on May 11, 2016 further clarified security measures to be taken by providers regarding log-keeping, including how authorities must request users' data from intermediaries, the level of technical security said intermediaries must adopt to safeguard logs from being leaked, and other identification and security procedures to be undertaken by the professionals responsible for handling said data, such as the obligation for individual identification and for the use of two-factor authentication.^[108]

In addition to the Marco Civil and the recent decree passed on May 11, a Privacy and Data Protection Bill is at an earlier stage of development. It aims to establish comprehensive data protection legislation with clear user rights regarding both government and private sector collection and use of data, and intermediary liability regarding the collection, storage and treatment of personal data. Like similar legislation overseas, such as the EU Data Protection Directive,^[109] the bill calls for the establishment of a national Data Protection Authority. Unlike many data protection laws in other countries, however, this law specifically mentions internet data protection alongside more general provisions for personal data.^[110] The latest draft for the bill was prepared following the debate on the enactment of Marco Civil, and after ten months of public consultation promoted through an interactive and open platform created by the Brazilian Ministry of Justice, which received over 1.3 million contributions from a variety of civil society sectors.^[111] On May 13, 2016 the draft bill was sent to Congress and has undergone discussion within several commissions.^[112]

The Brazilian government also seems to be increasing its capacity for surveillance, including national production of surveillance equipment. The country's defense budget forecast a US$10 billion expansion before 2020, partly investing in technology such as drones. The government, which has invested US$900 million dollars in security equipment, mostly because of the World Cup of 2014, hopes to continue using such equipment for widespread surveillance for the 2016 Olympic and Paralympic Games and beyond.^[113]

Intimidation and Violence

Threats, intimidation, and violence against online journalists and bloggers still constitute a major restriction on freedom of expression and human rights in Brazil. At least two bloggers and three other journalists were killed during the coverage period,^[114] and many other journalists and online activists reported harassment, threats, censorship, and physical assault.

Most of the murder victims were reportedly targeted for covering local corruption-related scandals. On November 13, 2015 blogger Ítalo Eduardo Diniz Barros was murdered as he walked on a major road of his town, Governador Nunes Freira, in the state of Maranhão. Diniz was a press officer for the town mayor and had been blogging about scandals and wrongdoings by other local politicians, and his acquaintances reported that he had been receiving death threats since 2012.^[115] On April 9, 2016, Manoel Messias Pereira, the owner of news portal sediverte.com, was also shot dead in the state of Maranhão. More recently, on July 24, 2016, João Miranda do Carmo, a crime reporter who owned local news website SAD Sem Censura, was shot outside his home in the state of Goiás. He had reported threats linked to his reporting.^[116]

Brazil has kept the 11th position on the Committee to Protect Journalists' Impunity Index, which tracks countries where journalists are murdered and killers run free. In a meeting with a CPJ delegation in 2014, President Dilma Rousseff committed to support legislative initiatives to federalize the competence for judging crimes against freedom of expression and to adopt a "zero tolerance" policy.^[117] Since then, the conviction in 2015 of the murderers of José Roberto Ornelas de Lemos, the administrative director of the daily Hora H , has been considered a benchmark for justice and human rights. Lemos was shot at least 41 times in 2013 after writing about the spread of militias allegedly led by corrupt police officers in the suburb of Nova Iguaçu. In November 2015, police arrested six people accused of running a militia believed to be directly linked to Lemos' murder. The arrests also resulted in the creation of a new homicide division in the city.^[118] However, most condemnations still only target the direct perpetrators of these crimes, allowing their planners to escape justice.

Harassment during political coverage is also a serious concern in Brazil. Online bloggers and journalists who work in poor or rural areas and are not linked to major urban media outlets may face more harassment because they lack visibility and support. Under such circumstances, authorities feel little pressure to solve attacks on the provincial press. Unsolved attacks on journalists may in turn dissuade local reporters from investigating crime and corruption in their regions.^[119]

Technical Attacks

Although the government has made efforts to strengthen cybersecurity, Brazil remains the top source and target of cyberattacks in Latin America.^[120] While their peers elsewhere usually concentrate on trans-border, global attacks, Brazilian hackers favor local operations, relying on a perception of impunity and on an expansive basis of potential victims.^[121] They mostly use surface web, forums, social networks and apps to facilitate their activities, and share know-how, ranging from malware development to phishing, banking fraud activities and botnets. Attacks seemed to escalate during the coverage period, as national hackers have been developing underground connections with more experienced criminals, especially in Russia and Eastern Europe.^[122]

In September 2015, Reporter Brasil , a nonprofit association of journalists, reported cyberattacks to its platform and website. A series of investigative reports on the fight against forced labor and complaints against major companies in the food industry were altered or deleted.^[123]

The financial sector was the main target for hackers, followed by the chemical, manufacturing and mining industries.^[124] A report published by the Brazilian Banking Federation in December 2015 found that, despite an investment of some US$500 million to fight cybercrime, banks have borne an equal amount of electronic fraud-related losses.^[125] Traditional attacks related to phishing and malicious downloads run in tandem with more specific vulnerabilities such as pernicious extensions or plug-ins for Google Chrome and Mozilla Firefox, the most popular internet browsers in Brazil.^[126] Mobile phones, tablets, wearables and smart home appliances have also grown as a common target for offenders, since users tend to be more reckless in providing protective tools for such products.

The National Agency of Telecommunications (ANATEL), Brazil's main regulatory body for the telecommunication sector, suffered a major DDoS attack at the end of April 2016, remaining offline for over 24 hours. The attack followed the announcement by major ISPs that they would introduce data caps for fixed broadband, causing major uproar among all sectors of Brazilian society.^[127]

Brazilian authorities have made some efforts to increase cybersecurity and invest more resources in overcoming current obstacles. Since 2008, Brazil has engaged in a multi-stakeholder debate to develop its cybersecurity agenda, which resulted in the opening of a National Cyber Defense Command, and a National School for Cyber Defense aimed at preparing military personnel for the use of cyber tools on national defense.^[128]

Notes:

1 "Brazil will make Olympics safe from Zika virus: WHO official," Reuters , February 23, 2016, http://reut.rs/1UlXYHp.

2 "Record Brazil protests put Rousseff's future in doubt," Reuters , March 14, 2016, http://reut.rs/1TY0c0Q.

3 International Telecommunications Union (ITU), "Percentage of Individuals using the Internet, 2000-2015," accessed August 11, 2016, http://bit.ly/2c3GSwk.

4 Center of Excellence in Information and Communication Technologies (CETIC), "Proporção de domicílios com Internet" [Percentage of Households with Internet Access], October 2014-March 2015, accessed March 21, 2016, http://bit.ly/2c0Km3Q; See also: CETIC, "No Brasil, 60% das casas ainda não têm internet" [In Brazil, 60 percent of households still do not have internet], July 1, 2013, http://bit.ly/1jbuXiH.

5 Empresa Brasil de Comunicação, "Acesso à internet chega a 49,4% da população brasileira" [Internet access reaches 49.4 percent of the Brazilian population], April 29, 2015, http://bit.ly/1GIh19q.

6 Teleco Inteligência em Comunicação, "Banda Larga Fixa no Brasil" [Fixed broadband in Brazil], January 2016, accessed March 21, 2016, http://bit.ly/2e2cT90.

7 Akamai, State of the Internet, Q4, 2015 Report, accessed August 11, 2016, http://akamai.me/2b5MgzU.

8 CGI.Br, "ICT Households and Enterprises 2013 – Survey on the use of Information and Communication Technologies in Brazil," 2014, http://bit.ly/1cRt7jV.

9 Bill 28/2011, http://bit.ly/1OxjBE8.

10 Teleco, "Hot-spots Wi-Fi no Brasil" [Wi-Fi hotspots in Brazil], January 2016, accessed March 20, 2016, http://bit.ly/2dLKJAo.

11 "Banda ancha móvil en Latinoamérica alcanzó 32% de penetración en 2014" [Mobile broadband penetration in Latin America reached 32 percent in 2014], Prensario Internacional , February 3, 2015, http://bit.ly/1NUcQL2; See also: Mediatelecom Agencia, "Banda Ancha Móvil de Brasil Crece Tres Veces Más Rápido Que El Promedio Mundial" [Mobile Broadband grows three times more than the global average], AE Techno , May 29, 2015, http://bit.ly/1V9IfNP.

12 ITU, "Mobile-Cellular Subscriptions 2009-2015," accessed March 20, 2016, http://bit.ly/1LOr3mK.

13 "Brazil loses mobile subscribers for sixth month in a row," Telecompaper , January 13, 2016, http://bit.ly/2c5NqL4.

14 Teleco, "Estatísticas de Celulares no Brasil," [Statistics on Mobile Phones in Brazil], accessed August 11, 2016, http://bit.ly/1w6LIAI.

15 Teleco, "4G: 4ª Geração de Celulares no Brasil" [Fourth Generation of Cellphones in Brazil], January 2016, accessed March 20, 2016, http://bit.ly/2ddg2RO.

16 "Cidade de SP é o 5° maior mercado da América do Sul, diz Fecomerico" [São Paolo is the Fifth Largest Market in South America, Says Fecomercio], O Globo , January 1, 2014, http://glo.bo/1JqlYzg.

17 Ministry of Communications, "Programa Nacional de Banda Larga" [National Broadband Plan], News release, May 25, 2015, http://bit.ly/UJ4JY6; See also: "Em 2018, 70% dos brasileiros terão acesso à banda larga" [In 2018, 70 percent of Brazilians will have access to broadband], Portal Brasil , October 22, 2015, http://bit.ly/2bPJzpi.

18 Associação Brasileira de Telecomunicações, "Banda larga 4G cresce 308% em 12 meses, diz Telebrasil" [4G Broadband Connections increased 308 percent over 12 months, according to Telebrasil], December 7, 2015, http://bit.ly/2bA1ivr.

19 "Em 2018, 70% dos brasileiros terão acesso à banda larga" [In 2018, 70 percent of Brazilians will have access to broadband], Portal Brasil , October 22, 2015, http://bit.ly/2bPJzpi.

20 Luciana Bruno, "Programa de banda larga se aproxima do fim cheio de críticas," [Broadband program nears end with criticism], Exame , September 30, 2014, http://abr.ai/1QyPXdC.

21 Law 12,715 of September 17, 2012, http://bit.ly/2c61xA3.

22 Ministério das Comunicações, "REPNBL – Início," News release, March 11, 2013, http://bit.ly/1PtY0bv.

23 Luís Osvaldo Grossmann, "REPNBL aprova R$ 526,4 milhões em projetos de 4G em 450 MHz, " [REPNBL approves R$ 526.4 million in 4G projects], Universo Online , July 13, 2015, http://bit.ly/1WjakiS.

24 Decree 7.921, February 15, 2013, http://bit.ly/1MqgJnH.

25 "Brazil's Programa Nacional de Banda Larga," Tech in Brazil , October 17, 2014, http://bit.ly/1Vb2cyi.

26 Anna Edgerton and Jordan Robertson, "Brazil-to-Portugal Cable Shapes Up as Anti-NSA Case Study," Bloomberg Business , October 30, 2014, http://bloom.bg/1gOGiDz.

27 Internet Society, "New Study Reveals How Internet Exchange Points Spur Internet Growth in Latin America," December 3, 2013, http://bit.ly/1Lx6mjr.

28 Latin America and Caribbean Network Information Center, "Internet Exchange Points en América Latina y Caribe," http://bit.ly/1V9O79Q.

29 Teleco, "Seção: Banda Larga – Market Share de Banda Larga no Brasil," [Section: Broadband – Market Share of Broadband in Brazil], accessed March 2016, http://bit.ly/1ix3MhE.

30 "Brazil competition watchdog approves Oi, Portugal Telecom merger," Reuters , January 14, 2014, http://reut.rs/1Ov29ys.

31 "Anatel aprova compra da GVT pela Vivo (e o que isso muda)" [Anatel approves purchase of GVT by Vivo, and what this changes], Technoblog , September 2014, http://bit.ly/2bQCbVX.

32 Gabriel Luiz, "Empresas querem vender Internet fixa como pacote de dados" [Companies want to sell fixed internet with data package], G1 , March 19, 2016, http://glo.bo/2c813JC.

33 Angelica Mari, "Brazilians protest against fixed broadband data cap," ZDNet , April 13, 2016, http://zd.net/2c4dCGR.

34 Helton Gomes e Thiago Reis, "Velocidade da banda larga no Brasil varia entre taxas de Líbia e Japão" [Broadband speed in Brazil varies between rates in Libya and Japan], G1 , May 13, 2015, http://glo.bo/2bBP5JW.

35 Kimberly Anastácio, "Parlamentares apresentam projetos de lei contra franquia de dados" [Parliamentarians present bills against data caps], Instituto Beta para Internet e Democracia, June 1, 2016, http://bit.ly/2cbuydP.

36 Edilson Rodrigues, "Após sugestão popular, proibição do limite para Internet pode virar lei" [After popular suggestion, ban on limits for internet could turn into law], IG Tecnologia , April 20, 2016, http://bit.ly/2c4ibRL.

37 Teleco, "Telefonia Celular – Operadoras de Celular" [Cellular Telephony – Cellular Operators, June 2010], accessed March 21, 2016, http://bit.ly/1ix42gx.

38 Teleco, "Operadoras de Celular – Jan/16" [Celular Operators – Jan/16], accessed March 21, 2016, http://bit.ly/1cfEPkY.

39 EMarketer, "Latin America Is Home to a Robust Mobile Market," September 16, 2015, http://bit.ly/1KpE75q.

40 Marco Civil, Art. 24, II.

41 Law 9.472/1997; See also: Maria Cecília Andrade, Ubiratan Mattos, and Pedro C. E. Vicentini, "Reforms in Brazilian Telecommunications Regulations and their Impact on Sector Competition," The Antitrust Review of the Americas 2009 (London: Global Competition Review, 2009), http://bit.ly/2bBsz5C.

42 Vinicius Marques de Carvalho, "Brazil: CADE," The Antitrust Review of the Americas 2014 (London: Global Competition Review, 2014), http://bit.ly/1LG4xjL.

43 For the outcomes of Net Mundial 2014, see: CGI, "Cadernos CGI.br | Declaração Multissetorial do NETmundial," January 28, 2015, http://bit.ly/1R0BsA9.

44 CGI.br, "Principles for the Governance and Use of the Internet," January 28, 2015, http://bit.ly/2bREEnM.

45 Rafael Barifouse, Fernando Duarte, Guilherme Barrucho, "Por que o bloqueio do WhatsApp não vingou – e como isso afetará a briga entre empresas de internet e Justiça" [Why the blocking of WhatsApp did not succeed – and how this will affect the fight between internet companies and Justice], BBC Brasil , December 17, 2015, http://bbc.in/1mbcOmp.

46 "WhatsApp Ordered Blocked Again in Brazil Over Data Dispute," Bloomberg , May 2, 2016, http://bloom.bg/1rsCA8y; See also: "Tribunal de Justiça de Sergipe emite nota sobre bloqueio do WhatsApp" [Court of Sergipe issues note on blocking of WhatsApp], G1 , May 2, 2016, http://glo.bo/2dXjbd1.

47 "WhatsApp block in Brazil overturned after court appeal and user complaints," The Guardian , May 3, 2016, http://bit.ly/2c6yhJ4.

48 This event occurred outside the period of coverage of this report.

49 "Brazil Supreme Court overturns judge's ruling blocking WhatsApp," EFE , July 20, 2016, http://bit.ly/2c6v38J.

50 "Juiz do Piauí determina suspensão do WhatsApp no Brasil," [Judge in Piaui decides to suspend WhatsApp in Brazil], Folha de S. Paulo , February 25, 2015, http://bit.ly/2bA4aIF.

51 "Justiça Bloqueia WhatsApp por 72 horas" [Justice blocks WhatsApp for 72 hours], Jota , May 2, 2016, http://bit.ly/2bPquiA; See also: Polido, Fabrício B.P, "Levando a sério o Marco Civil da Internet no Brasil: premissas para o repensar das instituições e a justiça na fronteira das tecnologias" [Taking the Marco Civil seriously in Brazil: premises for rethinking institutions and justice on the frontier of technology], IRIS, August 1, 2016, http://bit.ly/2c6yiNr.

52 Jan Koum (CEO and co-founder of WhatsApp), Facebook post, May 2, 2016, http://bit.ly/2bzZ8zf.

53 Telegram Messenger, Twitter post, May 3, 2016, 1:32 pm, http://bit.ly/2c31pT6.

54 Restrictions include liability of servers with regard to early online campaigning; unsubscribe mechanisms for electoral advertising; elevation of fines due to violations of online electoral conduct; and the criminalization of hiring people in order to perform online bashing of candidates. See: Law 12.891 of 2013, http://bit.ly/1my5W1I.

55 Twitter, "Removal requests," Transparency Report , July-December 2015, http://bit.ly/2dLMHk2.

56 See for example: Paula Martins, "Protest Letter to UN-Ricardo Fraga's Case," Article 19, April 22, 2014, http://bit.ly/1VcR6ci.

57 Committee to Protect Journalists, "Court orders Brazilian blogger to delete posts," June 2, 2016, http://bit.ly/2bFW9H7.

58 "Operação Censura" [Operation Censorship] Folha de São Paulo , June 2, 2016, http://bit.ly/2dMJmVI.

59 Law 12.735 of November 30, 2012, http://bit.ly/1sUwjhz.

60 Rafaella Torres, "Aprovação de Leis sobre Crimes Cibernéticos"[Approval of Cybercrime Laws], A2K Brazil (blog), January 17, 2013, http://bit.ly/1QAGF0L.

61 See Law 12.965 (Marco Civil da Internet), Art. 18: The provider of connection to internet shall not be liable for civil damages resulting from content generated by third parties. Art. 19: In order to ensure freedom of expression and prevent censorship, the provider of internet applications can only be subject to civil liability for damages resulting from content generated by third parties if, after a specific court order, it does not take any steps to, within the framework of their service and within time stated in the order, make unavailable the content that was identified as being unlawful, unless otherwise provided by law.

62 The case law evolved to a notice and takedown model, which means internet providers and content providers were requested to remove the alleged infringing or offensive material within 24 hours upon judicial order. See for instance STJ, Educacional/Yahoo , REsp 1.338.214/MT, decision as of November 13, 2013; STJ, Sassaki/Google , Resp 1.338.214/MT, decision as of December 12, 2012.

63 Pereira de Souza, Carlos Affonso, "Responsabilidade civil dos provedores de acesso e de aplicações de Internet: Evolução jurisprudencial e os impactos da Lei N° 12.965," IN: Lemos, Leite, Marco Civil da Internet, Atlas, 2014.

64 Court of Justice of the State of Mato Grosso do Sul, Civil Appeal N°0816829-25.2014.8.12.0001, decision as of January 26, 2016.

65 Court of Justice of the Federal District. Interlocutory Appeal N° 20150020218878AGI (0022263-35.2015.8.07.0000), decision as of November 25, 2015.

66 Brazilian Superior Court of Justice (STJ), Appeal to the Superior Court No. 1352053 / AL (March 24, 2014), http://bit.ly/1MP9esA.

67 Brazilian Superior Court of Justice (STJ), Appeals to the Superior Court No. 1501187 / RJ (December 16, 2014), 1337990 / SP (August 21 2014); Interlocutory Appeals No. 484995 / RJ, 1349961 / MG (September 16, 2014), 305681 / RJ (September 4, 2009), http://bit.ly/1NQa7Tg.

68 Appeal to the Superior Court of Justice No. 1337990 / SP (August 21, 2014), http://bit.ly/1NQa7Tg.

69 Senado Federal, "Conselho de Comunicação Social defende sigilo da fonte jornalística," News release, September 14, 2009, http://bit.ly/1iO7y71; See also: Instituto de Tecnologia e Sociedade, "Direito ao esquecimento: o mundo todo precise esquecer?" Brasil Post (blog), August 8, 2015, http://bit.ly/1Hofb7Y; See also the Proposed Bills: Câmara dos Deputados, Projeto de Lei 7881/2014, http://bit.ly/1QAItH8; and Câmara dos Deputados, Projeto de Lei 215/2015, http://bit.ly/1JjdKNY.

70 Melissa Cruz, "Facebook revela dados do Brasil na CPBR9 e WhatsApp 'vira ZapZap'" [Facebook reveals Brazil data at CPBR9], Techtudo , January 28, 2016, http://glo.bo/1WiPBx5.

71 "Violência contra jornalistas aumentou em 2015, diz relatório da Fenaj" [Violence against journalist increased in 2015, says Fenaj report], Folha de S. Paolo , January 21, 2016, http://bit.ly/2bRvZgB.

72 "For shared plans, national corporate hosting prices averages between US$ 4.85 to US$ 8.9 per month, for the beginners' plan. It is possible to reduce costs by choosing a longer plan, though. Amongst the most economic plans are HostGator hosting, at US$ 2.85/month for the triennial plan, UOL Host, at US$2.82/month for the annual plan" (currency conversion and translation by the author). See: "Cuanto custa ter um site?" [How Much does a site cost?], August 28, 2015, http://bit.ly/1XfVZW3.

73 Law 10.406, January 10, 2002, Art.932, V, http://bit.ly/1drzx5j.

74 Decree 8.771, May 11, 2016, http://bit.ly/2c7Iqqv.

75 Internet.org changed its name to Free Basics in September 2015.

76 Pedro Vilela, "O que muda com o decreto de regulamentação do Marco Civil?" [What changes with the decree regulating Marco Civil?], Instituto de Referência em Internet e Sociedade, May 13, 2016, http://bit.ly/2bLHR39.

77 Rafael Bucco, "América Móvil reavalia oferta de zero-rating no Brasil," [America Movil reevaluates zero-rating in Brazil], Telesíntese , August 2, 2016, http://bit.ly/2crx2sB.

78 For an interactive map of the protests, see: "Map of demonstrations against Dilma, 13/03," Globo.com, accessed May 30, 2016, http://bit.ly/1Rf6RTK.

79 Simon Romero, "Protesters Across Brazil Call for President Dilma Rousseff's Ouster," The New York Times , March 13, 2016, http://nyti.ms/1rPLsoO.

80 "Começa 2ª fase da Consulta Pública do Decreto do Marco Civil da Internet," [Second phase of the public consultation on the Marco Civil decree begins], Jota , January 30, 2016, http://bit.ly/1R5VCvd; See also: Ministry of Justice, "Debate sobre o decreto do Marco Civil da Internet finaliza com mais de 1.500 comentários," [Debate on Marco Civil Decree ends with more than 1,500 comments], March 3, 2016, http://bit.ly/2crE3tz.

81 Open Government Partnership, "Brazil," accessed October 10, 2016, http://bit.ly/2d8fzoH.

82 Constituição Federal de 1988, [Federal Constitution of 1988], English translation: http://bit.ly/1iOdLz.

83 Law 12.965, April 23, 2014, http://bit.ly/1kxaoKm; See also English version by Carolina Rossini, distributed by CGI.Br at the end of Net Mundial event: http://bit.ly/1jerSOK.

84 Decree 8.771, May 11, 2016, http://bit.ly/2c7Iqqv.

85 Decree 2848/40, Penal Code, Art. 331, http://bit.ly/1OV4Vwj.

86 Article 19, "Brazil: Article 19 launches campaign to decriminalize defamation," Press release, October 29, 2014, http://bit.ly/1FwsNnz.

87 Law 9.459, May 13, 1997, Art. 20, http://bit.ly/2dYnwN3.

88 Law 12.735, November 30, 2012, Art.1, http://bit.ly/2d8flOs.

89 Fernando Diniz, "Após Parada Gay, "Cristofobia" pode virar crime hediondo," [After Gay Parade, 'Christphobia' could become a heinous crime], Terra , June 8, 2015, http://bit.ly/1cIAVDW.

90 "After 13 Years, Brazil approves two cybercrime laws at once," Linha Defensiva , November 7, 2012, http://bit.ly/1NWuC04.

91 Andrew Fishman, "Propostas da CPI dos Crimes Ciberneticos ameaçam a Internet livre para 200 milhões de pessoas," [Cybercrime proposals threaten free internet for 200 million people], The Intercept , April 26, 2016, http://bit.ly/1SIrFAB.

92 Câmara dos Deputados, [Chamber of Deputies], "Conheça as propostas do Relatório Final da CPICIBER," [See the proposals of the final report by CPICIBER], accessed May 9, 2016, http://bit.ly/2dLfiG4.

93 José Antonio Miracle, "Relatório final da CPI dos Crimes Cibernéticos gera discussão," [Final report generates discussion], May 13, 2016, http://bit.ly/2e9MUgk; see also: Coletivo Intervozes, "CPI de crimes cibernéticos aprova relatório que ataca liberdade na internet," [Commission approves report that attacks freedom online], Carta Capital , May 6, 2016, http://bit.ly/2dl03V3.

94 "Paulo Henrique Amorim é condenado por injúria a jornalista," [P. H. Amorim is condemned for insulting a journalist], Folha de São Paulo , April 29, 2014, http://bit.ly/1OV6sSR.

95 Committee to Protect Journalists, "CPJ calls on authorities to release imprisoned Brazilian blogger," September 15, 2015, http://bit.ly/2dl7mfm.

96 Reuters, "Facebook executive says Brazil jail stint won't slow company's growth," The Guardian , March 5, 2016, http://bit.ly/2fLn1qT.

97 "Polícia prende vice-presidente do Facebook na América Latina em SP" [Police arrests vice-president of Facebook in Latin America], G1 , March 1, 2016, http://glo.bo/1TOtuyl.

98 Constituição Federal de 1988, art. 5, http://bit.ly/1FieR0R.

99 See Brazilian Superior Court of Justice Appeals to the Superior Court of Justice No. 1192208-MG, REsp 1186616-MG and REsp 1300161-RS.

100 Law 12228/06, http://bit.ly/1NvRBjT.

101 Rio de Janeiro Municipal Decree 36.207, September 12, 2012, http://bit.ly/1WB0trP.

102 Bill 28/2011, http://bit.ly/1OxjBE8.

103 Marco Civil da Internet, Art. 13, http://bit.ly/1kxaoKm.

104 Bill 1879/2015, http://bit.ly/1MBSghD; See also: "Fim do anonimato: projeto de lei quer exigir CPF para comentar em blogs e redes sociais," [End of anonymity: legal project seeks to require CPF in order], Technoblog , http://bit.ly/1MWF9Vh.

105 "Brazil Requests for Data," Facebook Government Requests Report, July-December 2015, http://bit.ly/2esMAMD.

106 Law No. 12.965, Government of Brazil, April 23, 2014. English version by Carolina Rossini, distributed by CGI.Br at the end of Net Mundial event, available at http://bit.ly/1jerSOK

107 Coding Rights and Instituto Beta para Internet e a Democracia, "Nota Técnica: Retenção de Registros de Conexão e Aplicações," [Technical note: Retention of connection and application logs], accessed October 12, 2016, http://bit.ly/2egPy7C.

108 Decree 8.771, May 11, 2016, http://bit.ly/2c7Iqqv; See also: Artigo 19, "Regulamentação do Marco Civil da Internet é um avanço," [Regulation of Marco Civil is a breakthrough], May 20, 2016, http://bit.ly/2dYbhjf.

109 Directive 95/46/EC, 24 October 1995, http://bit.ly/1Oxk8py.

110 Ministério da Justiça, "Anteprojeto de Lei para a Proteção de Dados Pessoais" [Legal Proposal for the Protection of Personal Data], accessed March 25, 2016, http://bit.ly/1PQ0LpT.

111 Pedro Peduzzi, "MJ finaliza nova versão de anteprojeto sobre proteção de dados na internet" [Ministry of Justice finalizes new version of internet data protection bill], Agencia Brasil , October 19, 2015, http://bit.ly/1OHUcX6.

112 Bill 5276/16, accessed August 16, 2016, http://bit.ly/1TujEke.

113 Lorien Olive and Orlando Guzman, "The scary history and future of Brazil's booming drone market," Fusion , August 24, 2015, http://fus.in/1h8T5RF; See also: Joao Paolo Vicente, "Como as Olimpíadas ajudaram o Brasil a aumentar seu aparato de vigilância social," [How the Olympics helped Brazil to increase its social surveillance apparatus], Motherboard , July 27, 2016, http://bit.ly/2a6WkdW; Artigo 19, "Da Cibersegurança à Ciberguerra – o desenvolvimento de políticas de vigilância no Brasil" [From cybersecurity to cyberwar: the development of surveillance policies in Brazil], March 10, 2016, http://bit.ly/2d89KI7.

114 Reporters Without Borders, Journalists Killed 2015-2016, http://bit.ly/2dXzwMD; See also: Committee to Protect Journalists, "Journalists Killed in Brazil," http://bit.ly/1LN0btX.

115 Committee to Protect Journalists, "Ítalo Eduardo Diniz Barros," November 13, 2015, http://bit.ly/1Uq4sX8.

116 Reporters Without Borders, "Website owner is third journalist murdered in Brazil in 2016," July 26, 2016, http://bit.ly/2bCgkXx.

117 Committee to Protect Journalists, "Getting Away With Murder," October 8, 2015, http://bit.ly/1G1HEGQ.

118 Andrew Downie, "Amid rising violence in Brazil, convictions in journalists' murders are cause for optimism," Committee to Protect Journalists, February 29, 2016, http://bit.ly/1MHdHtS.

119 John Otis, "Bloggers Targeted as Murders Spike in Brazil," Committee to Protect Journalists, February 2013, http://bit.ly/1LzzPt0.

120 "Brasil é o terceiro país que mais realiza ataques cibernéticos no mundo," [Brazil is the third country that carries out the most cyberattacks in the world], August 19, 2015, http://bit.ly/1YwiDrV.

121 "Beaches, carnivals and cybercrime: Kaspersky Lab shares insights on Brazilian cyber underground," Kaspersky Lab , November 11, 2015, http://bit.ly/1MBkjdj.

122 Christian Plumb, "Latam cyberattacks rise as Peru, Brazil hackers link up with Russians," Reuters , August 28, 2015, http://reut.rs/1RyqAOl.

123 "Reporter Brasil sofre pesado ataque digital" [Reporter Brasil suffers heavy digital attack], Reporter Brasil , September 19, 2015, http://bit.ly/1gGZB1n.

124 "Ascending the Ranks: The Brazilian Cybercriminal Underground in 2015," Trend Micro , January 12, 2016, http://bit.ly/1o5txbh.

125 Claudia Tozetto, "Cibercrime faz bancos perderem R$ 1,8 bilhão," [Cybercrime makes banks lose R$1.8 billion], O Estado de São Paulo , December 21, 2015, http://bit.ly/1PjGmKh.

126 "Largest Cybercrime Threats in Brazil," Tech in Brazil , April 8, 2015, http://bit.ly/1py3z1l.

127 Olhar Digital, "Anatel sofre ataque hacker e tem serviços online derrubados" [Anatel suffers hacking attack and online services are brought down], Olhar Digital , April 22, 2016, http://bit.ly/2cdjPz9.

128 Andrea Barreto, "Brazilian Armed Forces Strengthen the Nation's Cybersecurity Defense," Diálogo Digital Military Magazine, April 14, 2015 , http://bit.ly/1FinqJ7; See also: "EB – Defesa Cibernética entra em nova fase" [Cyber defense enters new phase], Defesanet, July 24, 2015, http://bit.ly/1o5CtNX.