GSI opens Public Consultation on the National Information Security Strategy and the Integrated Information Security System

A public consultation is open on the Brasil Participativo platform, promoted by the Institutional Security Office of the Presidency of the Republic (GSI/PR), regarding the draft decree that establishes the National Information Security Strategy (E‑SegInfo) and the Integrated Information Security System (SISInfo), applicable to bodies and entities of the Federal Executive Branch, with voluntary adherence possible by the other branches of government and federative entities.

The proposed regulation seeks to consolidate a structuring information security policy for the federal public administration, focusing on the coordination of institutional capabilities, the standardization of governance guidelines and instruments, and the strengthening of the protection of data, sensitive information, informational assets, and essential public services. The initiative is led by the Secretariat for Information and Cybersecurity, within the context of implementing the National Information Security Policy.

Under the draft, E‑SegInfo is organized around four thematic axes: culture and education; sensitive data and information; governance and resources; and national and international cooperation. These axes group strategic actions aimed, among other objectives, at raising awareness and training public agents, protecting classified information and personal data, improving institutional governance, strengthening state resilience, and expanding coordination among public bodies, academia, the productive sector, and international partners.

SISInfo, in turn, organizes information security activities in the public sector as an integrated system, with a central body, sectoral, sectional, related and federated bodies, and a Coordination Committee. The draft also foresees the implementation of a structuring system intended to support, at different levels, governance activities, risk management, compliance assessment, information sharing, impact analysis, and other functions essential to the effectiveness of the strategy.

The public consultation represents a relevant opportunity for civil society, the productive sector, academia and public agents to contribute to the formulation of a more consistent, coordinated and fitting normative architecture for information security in light of the contemporary challenges of digital public administration. The deadline for submission of contributions, as announced by GSI/PR, ends on 15 June 2026.

Given the cross-cutting nature of information security and its interface with issues such as personal data protection, digital transformation, continuity of essential services, and critical infrastructure protection, qualified participation in this process can directly contribute to improving the draft regulation and to building clearer, proportionate and operationalizable guidelines for the covered bodies and entities. For public and private organizations operating in the regulated ecosystem, this is a discussion with potentially significant impact on governance, compliance, risk management and institutional design.

In parallel with the discussions on digital governance and data protection, the National Data Protection Authority (ANPD) has launched an exclusive channel for receiving complaints regarding non-compliance with the Digital ECA. The new tool aims to centralize reports of irregularities on platforms and websites, such as age verification failures, the absence of parental supervision mechanisms, and deficiencies in default privacy settings (privacy by design) for children and adolescents. Official information and access to the channel can be found directly on the portal.

Peck Advogados continuously monitors normative and regulatory developments related to information security, digital governance, cybersecurity and personal data protection, and has specialists ready to assist with analysis of the draft, assessment of institutional and regulatory impacts, and preparation of technical contributions to the public consultation. For more information or to schedule a conversation with our specialists, contact us at contato@peckadv.com.br.

Prepared by: Prof. Dr. Patricia Peck, CEO and Founding Partner, and Caroline Morata, Legal Assistant at Peck Advogados

AUTHOR

• Caroline Morata
• Patricia Peck