Law No. 14,967/2024: what changes for buyers of electronic monitoring in Brazil

For many years, hiring electronic monitoring in Brazil was essentially a technical decision: cameras, alarms, a control room and a maintenance contract. With Law No. 14,967 of September 9, 2024 (Lei nº 14.967/2024), the activity gained its own regulatory framework. The law established the Statute of Private Security and of the Security of Financial Institutions (Estatuto da Segurança Privada e da Segurança das Instituições Financeiras; preamble and art. 1) — and electronic monitoring falls within it.

This article summarizes, with article references, the points that matter most to those who hire this kind of service: residential building boards, property managers, facility managers and companies.

Electronic monitoring is now private security

Article 5 of the law lists the private security services. Item VI includes the monitoring of electronic security systems. In practice, monitoring is no longer treated merely as a technical service: it is part of the same legal regime as other private security activities.

Article 7 details what this service comprises:

• designing the system (item I);
• leasing, selling, installing and maintaining the equipment (item II);
• technical assistance and technical inspection (item III).

Authorization and oversight by the Federal Police

Providing private security services requires prior authorization from the Federal Police (art. 4), which is also responsible for controlling and overseeing the activity (art. 40, items I and III). The authorization is not permanent: under art. 40, item II, point “b”, it must be renewed every five years.

For the buyer, the consequence is straightforward: the provider’s standing with the Federal Police becomes something to check, as is already the case with other private security services.

Whoever operates the system is a regulated professional too

Article 26, item VI, lists the electronic security system operator among private security professionals. The law itself states that this professional does not carry a firearm and does not carry out personal searches.

Under the law (art. 28, § 3), operators must be at least 18 years old, have completed secondary education, be found fit in a mental and psychological health assessment and be employed by a private security provider (or an in-house security service). Under the regulation, they must also complete a specific training course (Decree No. 13,012/2026, art. 32).

The implementing rules: Decree No. 13,012/2026

The law was regulated by Decree No. 13,012 of June 9, 2026 (Decreto nº 13.012/2026; Official Gazette, June 10, 2026). The Federal Police then issued Normative Instruction DG/PF No. 340 of July 31, 2026 (in Portuguese), which sets out the procedures for authorization, control and oversight. One point relevant to the market is the distinction between monitoring and standalone sales: selling, leasing, installing or maintaining equipment without remote monitoring is treated as standalone commercialization (comercialização isolada) (Law No. 14,967/2024, art. 24; Decree No. 13,012/2026, art. 34, § 4).

In other words, it is worth being clear about what is being purchased: a system that is only installed and maintained, or a service that includes remote monitoring.

There is a transition period

Article 60 of the law provides a period of up to three years from publication for providers to adapt — according to Federal Police guidance (in Portuguese), until September 9, 2027. The transition is therefore likely to be gradual — and it is natural to find companies at different stages of this process. For the buyer, the most useful approach is to ask and record, rather than assume.

Questions to ask your provider

A good conversation with a monitoring provider can start with these questions:

1. Regulatory standing. How is the company preparing for the Federal Police authorization required by the Statute?
2. People. Who operates the system? How are operators selected and trained?
3. Data protection (LGPD). How are images and personal data handled? Who has access, how long are they kept and how are they disposed of?
4. Traceability. Are events, alarm responses and operator actions logged? Can this history be consulted?
5. Maintenance. What is the preventive and corrective maintenance routine, and how is it documented?
6. Governance. Does the contract clearly define responsibilities, service levels and communication channels?

None of these questions requires legal expertise. All of them help turn a technical purchase into a well-documented decision.

How CIA approaches the topic

At CIA, we follow the Statute and its implementing rules as part of our ongoing regulatory alignment program. We have gathered the main points, also with article citations, on our Compliance page.

Notice. This content is informational and does not constitute a legal opinion. For decisions, consult the full text of Law No. 14,967/2024 (in Portuguese), the regulations in force and, where needed, a legal professional.

If you are reviewing the monitoring of your building or company and would like to talk it through, get in touch with our team.