Regulatory references

Laws, regulations and technical standards relating to the documented operations.

This page lists the rules and technical standards relevant to the operations described in this documentation. The list is informative and does not replace consultation of the text in force of each rule or the integrator’s own legal assessment of the obligations applicable to it. The rules are Brazilian and are cited by their official designation.

​

Payment system

Rule	Subject
Law No. 12,865 of 9 October 2013	Governs the payment schemes and payment institutions that form part of the Brazilian Payment System.
Complementary Law No. 105 of 10 January 2001	Governs the secrecy of the operations of financial institutions.

​

Pix

Rule	Subject
BCB Resolution No. 1 of 12 August 2020	Establishes the Pix payment scheme and approves its Regulation.
BCB Resolution No. 103 of 8 June 2021	Amends the Pix Regulation to establish the Special Return Mechanism (MED).
Manual de Padrões para Iniciação do Pix	Specifies the BR Code and the technical standards for payment initiation. Published by the Central Bank of Brazil.

​

Consumer relations

Rule	Subject
Law No. 8,078 of 11 September 1990	Consumer Protection Code. Article 49 governs the right of withdrawal for contracts concluded away from business premises.
Decree No. 7,962 of 15 March 2013	Regulates the Consumer Protection Code with regard to contracting in electronic commerce.

​

Data protection and prevention of illicit acts

Rule	Subject
Law No. 13,709 of 14 August 2018	General Data Protection Law (LGPD).
Law No. 9,613 of 3 March 1998	Governs the crimes of laundering or concealment of assets, rights and values, and the prevention of the use of the financial system for such acts.

​

Card industry standards

Standard	Subject
PCI DSS	Payment Card Industry Data Security Standard, maintained by the PCI Security Standards Council.
Card brand rules	Regulations of the card payment schemes, which govern the authorization, settlement and dispute of transactions.

​

Technical standards

Standard	Subject
RFC 9110	HTTP semantics.
RFC 8259	The JSON data interchange format.
RFC 7617	The Basic HTTP authentication scheme.
RFC 6750	Bearer token usage.
RFC 7519	JSON Web Token.
ISO 8601	Representation of dates and times.
ISO 4217	Currency codes.
EMV QRCPS	QR Code specification for payment systems, the basis of the BR Code.