Brazil ANATEL and Mexico IFT/CRT: LATAM AI Voice Compliance in 2026

Brazil and Mexico together cover 350M+ mobile lines. ANATEL is launching a centralized call authentication framework in 2026; Mexico is mid-transition from IFT to a new regulator (CRT). AI voice operators entering LATAM in 2026 must build for two regulators in flux.

What the rule says

flowchart TD
  Out[Outbound campaign] --> Twilio[Twilio Voice API]
  Twilio --> STIR[STIR/SHAKEN attestation]
  STIR --> Carrier[Originating carrier]
  Carrier --> Term[Terminating carrier]
  Term --> Recipient[Recipient phone]
  Recipient --> Webhook[/voice webhook/]
  Webhook --> Agent[AI sales agent]

Brazil. Agência Nacional de Telecomunicações (ANATEL) regulates telecom; the Lei Geral de Proteção de Dados (LGPD, Law No. 13,709/2018) regulates personal data. ANATEL Resolution No. 777/2025 established the Call Authentication Working Group (GT-AUTENTICA) to deploy a centralized solution comparable to STIR/SHAKEN. Decree No. 6,523/2008 requires call recording in customer-service contexts. Brazil has São Paulo state and other municipal "do not disturb" registries; the federal "Não Me Perturbe" registry (managed by industry self-regulation) blocks marketing calls from telecom and financial sectors. ANATEL is also running a 2026 public consultation on AI in telecom.

Mexico. The Instituto Federal de Telecomunicaciones (IFT) has been reorganized into the Comisión de Regulación de Telecomunicaciones (CRT) under the new Law of Telecommunications and Broadcasting. The Federal Consumer Protection Agency (PROFECO) maintains the Registro Público para Evitar Publicidad (REPEP) do-not-call list under the Federal Consumer Protection Law. The Federal Law on Personal Data Protection Held by Private Parties (LFPDPPP) governs personal data. NOM-184-SCFI-2018 imposes specific consumer protection rules on telecom service providers.

What it means for AI voice agent operators

For Brazil, the operational reality:

Register and validate caller authentication ahead of GT-AUTENTICA's rollout. ANATEL has signaled the framework is coming; early registrants get cleaner reputation.

Capture LGPD-aligned consent for any AI call recording or data processing. LGPD penalties are 2% of Brazilian revenue per violation, capped at R$50M per infraction.

Scrub against "Não Me Perturbe" for any marketing campaign, especially in financial services and telecom verticals.

For Mexico:

Subscribe to and scrub against REPEP every 30 days. PROFECO publishes REPEP updates regularly; lapses generate fines.

Capture LFPDPPP-aligned consent. Privacy Notices (avisos de privacidad) must be presented at point of collection.

Track the IFT-to-CRT transition. CRT picks up most regulatory functions but technical certifications and standards are mid-migration. Confirm with your carrier which authority licenses your number range.

For both: AI disclosure at call start is best practice. Neither regulator has issued AI-specific verbal-disclosure rules yet, but the consumer-protection lens (PROFECO in Mexico, Senacon and ANATEL in Brazil) treats AI similar to automated calling for fairness purposes.

How CallSphere stays compliant

For LATAM deployments, CallSphere routes Brazilian and Mexican calls through Twilio's regional PoPs with country-specific Customer Profiles. Brazilian DIDs ride Twilio's local presence with documentation aligned to ANATEL number assignment rules; Mexican DIDs are provisioned through CRT-licensed inventory. Sales Calling AI in Brazilian deployments scrubs against Não Me Perturbe before each campaign and applies LGPD consent capture in Portuguese. Healthcare AI deployments in Brazilian clinics use LGPD's "execution of contract" lawful basis for appointment confirmations, with explicit consent for any recording. Mexican deployments scrub REPEP via PROFECO's API and present a Spanish-language Privacy Notice at call start. Across 6 verticals, 50+ businesses, 4.8/5 rating, and a 14-day trial, LATAM presets cover the Salon AI, Real Estate AI, and After-Hours AI products with localized compliance defaults.

Compliance checklist

1. Brazil: register your business with ANATEL number-assignment rules through your carrier.
2. Brazil: scrub against Não Me Perturbe every 30 days for marketing.
3. Brazil: comply with LGPD Article 7 lawful bases; document choice per use case.
4. Brazil: present a Privacy Notice (Aviso de Privacidade) at call start in Portuguese.
5. Mexico: subscribe to and scrub against REPEP every 30 days.
6. Mexico: comply with LFPDPPP Article 16 Privacy Notice requirements at point of collection.
7. Mexico: track the IFT-to-CRT transition; confirm number licensing under the new regulator.
8. Both: disclose AI use at call start; "automated assistant" / "asistente automatizado".
9. Both: respect calling-hours norms; Brazil 8am-9pm local, Mexico typical 8am-9pm.
10. Both: retain consent records for at least two years.
11. Both: monitor regulator bulletins quarterly for AI-specific rules.
12. Both: localize privacy disclosures into Portuguese and Spanish, not English.

FAQ

Does Brazil have a STIR/SHAKEN equivalent? ANATEL's GT-AUTENTICA working group is building one. As of mid-2026 it is in deployment phase; full rollout target is 2026-2027.

Is REPEP mandatory in Mexico? Marketing calls to REPEP-registered numbers are prohibited. The list is enforced by PROFECO.

Can I record calls in Brazil without consent? Decree 6,523 actually requires recording in some customer-service contexts, but LGPD requires a lawful basis and notice. Disclose at call start.

Does LGPD apply to non-Brazilian companies? Yes, if you process data of Brazilian residents or offer services in Brazil.

What about Argentina, Colombia, Chile? Each has its own data protection law (Argentina Law 25,326, Colombia Law 1,581, Chile Law 19,628). LATAM is fragmented; treat each country separately. Brazil and Mexico cover the largest markets.

Sources

• ANATEL Resolution No. 777/2025 (Call Authentication)
• LGPD (Lei Geral de Proteção de Dados, Law 13,709/2018)
• PROFECO REPEP (Mexico)
• Mexico CRT (Comisión de Regulación de Telecomunicaciones)

Start a 14-day trial, browse pricing, or join the /affiliate program.