Brazil's n º 77 act has new network security requirements for telecommunications equipment

In July 2021, the n º 77 Act issued by Brazil's national communication administration ANATEL officially came into force. The scheme puts forward new network security requirements for telecom equipment entering the Brazilian market, so that it can minimize or repair vulnerabilities through software / firmware updates or configuration suggestions. The Act applies to all kinds of networking terminal equipment and telecommunications network infrastructure equipment.  

Agência Nacional de Telecomunicações, abbreviated as ANATEL, that is, Brazil's national communication administration, is the official Brazilian organization responsible for the recognition of communication products. All communication products sold in the Brazilian market need to obtain Anatel certification.  

The act regulates that when the equipment completes the certification procedure and passes for the first time, ANATEL requires the applicant to issue a declaration letter in Portuguese, stating the following:

1.Product development fully complies with the safety principle; 

2. The equipment and its suppliers shall strictly comply with the requirements of the act in the declaration; 

3. The applicant has confirmed to understand the latest developments of network security requirements. At the same time, it is worth noting that Anatel can use the power of market supervision to understand whether the equipment and its suppliers comply with the requirements of the act and the contents of the declaration letter.

Finally, the network security requirements mentioned in the act can be summarized into the following seven points:  

- software or firmware updates

-  remote management  

- safety and operating procedures  

- access device configuration  

- data communication service  

- personal information  

- resist network attacks