The Agência Nacional de Telecomunicações (ANATEL) published Ato No. 16417 on November 26, 2024, containing an Operating Procedure with guidelines for auditing telecommunications product and equipment suppliers on their cybersecurity policies for service providers. The Act is currently in effect and will become mandatory on November 26, 2025.