# Brasil (BR) — sources

Public sources used to compile `data/countries/br.json`. All citations are
public · gov open data · regulatory bodies · published corporate filings.

## Regulatory framework

### Federal cybersecurity instruments
- **Decreto 9.637/2018 · Política Nacional de Segurança da Informação (PNSI).**
  http://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/decreto/D9637.htm
- **Decreto 10.222/2020 · Estratégia Nacional de Segurança Cibernética (E-Ciber).**
  http://www.planalto.gov.br/ccivil_03/_ato2019-2022/2020/decreto/D10222.htm
- **Lei 13.709/2018 · Lei Geral de Proteção de Dados Pessoais (LGPD).**
  https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm
- **Lei 12.965/2014 · Marco Civil da Internet.**
  http://www.planalto.gov.br/ccivil_03/_ato2011-2014/2014/lei/l12965.htm
- **Decreto 9.573/2018 · Aprova a Política Nacional de Segurança de Infraestruturas Críticas (PNSIC).**
  http://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/decreto/d9573.htm

### Coordinating bodies
- **GSI/PR · Gabinete de Segurança Institucional da Presidência da República.**
  https://www.gov.br/gsi
- **CTIR Gov · Centro de Tratamento e Resposta a Incidentes Cibernéticos de Governo.**
  https://www.gov.br/ctir/pt-br
- **ANPD · Autoridade Nacional de Proteção de Dados.**
  https://www.gov.br/anpd

### Internet governance
- **CGI.br · Comitê Gestor da Internet no Brasil.** https://www.cgi.br
- **NIC.br · Núcleo de Informação e Coordenação do Ponto BR.** https://www.nic.br
- **CERT.br · Centro de Estudos, Resposta e Tratamento de Incidentes de Segurança no Brasil.**
  https://www.cert.br

### Sectoral regulators
- **BCB · Banco Central do Brasil.** https://www.bcb.gov.br
- **ANATEL · Agência Nacional de Telecomunicações.** https://www.gov.br/anatel
- **ANEEL · Agência Nacional de Energia Elétrica.** https://www.gov.br/aneel
- **ANS · Agência Nacional de Saúde Suplementar.** https://www.gov.br/ans
- **ANTAQ · Agência Nacional de Transportes Aquaviários.** https://www.gov.br/antaq
- **ANTT · Agência Nacional de Transportes Terrestres.** https://www.gov.br/antt
- **ANAC · Agência Nacional de Aviação Civil.** https://www.gov.br/anac
- **ANP · Agência Nacional do Petróleo, Gás Natural e Biocombustíveis.** https://www.gov.br/anp
- **ANA · Agência Nacional de Águas e Saneamento Básico.** https://www.gov.br/ana

## Identifier sources

- **CNPJ · Cadastro Nacional da Pessoa Jurídica · Receita Federal.**
  https://www.gov.br/receitafederal/pt-br/servicos/cadastro/cnpj
- **CNPJ lookup service · Receita Federal.**
  https://solucoes.receita.fazenda.gov.br/servicos/cnpjreva/cnpjreva_solicitacao.asp

## Operator-level corroboration

For each operator we cross-checked at least one of the following:

- **Portal da Transparência (Federal Government).** https://portaldatransparencia.gov.br
- **Comissão de Valores Mobiliários (CVM) · issuer filings.** https://www.cvm.gov.br
- **B3 (Brasil, Bolsa, Balcão) · listed-company disclosures.** https://www.b3.com.br
- **Operator's own corporate site** (institutional footer with CNPJ).

## Per-operator citation index (selected)

### Banking & finance
- Banco do Brasil · CNPJ 00.000.000/0001-91 — https://www.bb.com.br · cross-checked Portal da Transparência.
- Itaú Unibanco · CNPJ 60.701.190/0001-04 — https://www.itau.com.br · cross-checked B3 issuer page (ITUB4).
- Bradesco · CNPJ 60.746.948/0001-12 — https://www.bradesco.com.br · cross-checked B3 issuer page (BBDC4).
- Santander Brasil · CNPJ 90.400.888/0001-42 — https://www.santander.com.br · cross-checked B3 issuer page (SANB11).
- Caixa Econômica Federal · CNPJ 00.360.305/0001-04 — https://www.caixa.gov.br · cross-checked Portal da Transparência.
- BTG Pactual · CNPJ 30.306.294/0001-45 — https://www.btgpactual.com · cross-checked B3 issuer page (BPAC11).
- Nu Pagamentos (Nubank) · CNPJ 18.236.120/0001-58 — https://nubank.com.br/dados-abertos (operator's own open-data page).
- Banco Inter · CNPJ 00.416.968/0001-01 — https://inter.co · cross-checked Nasdaq filings (INTR).

### Telecommunications
- Telefônica Brasil (Vivo) · CNPJ 02.558.157/0001-62 — https://vivo.com.br/para-voce/comunicados/regulatorios/decreto-federal (operator's federal-decree disclosure page).
- Claro · CNPJ 40.432.544/0001-47 — https://www.claro.com.br · cross-checked corporate-relations filings.
- TIM · CNPJ 02.421.421/0001-11 — https://www.tim.com.br/sobre-a-tim (operator's institutional page).
- Oi · CNPJ 76.535.764/0001-43 — https://www.oi.com.br · cross-checked CVM filings (recuperação judicial).

### Electricity
- Eletrobras · CNPJ 00.001.180/0001-26 — https://www.eletrobras.com · cross-checked BNDES partial issuer doc.
- Cemig · CNPJ 17.155.730/0001-64 — https://ri.cemig.com.br · cross-checked ANEEL records (Cemig D, GT subsidiaries have own CNPJs).
- Copel · CNPJ 76.483.817/0001-20 — https://www.copel.com · cross-checked CVM filings (CPLE6).
- ONS · CNPJ 02.998.301/0001-81 — https://www.ons.org.br (operator's institutional documents).

### Oil & gas
- Petrobras · CNPJ 33.000.167/0001-01 — https://petrobras.com.br · cross-checked SEC EDGAR (PBR 6-K filings).
- Vibra Energia (ex-BR Distribuidora) · CNPJ 34.274.233/0001-02 — https://www.vibraenergia.com.br · cross-checked B3 issuer page (VBBR3).
- Raízen · CNPJ 33.453.598/0001-23 — https://www.raizen.com.br · cross-checked B3 issuer page (RAIZ4).

### Water & sanitation
- Sabesp · CNPJ 43.776.517/0001-80 — https://www.sabesp.com.br · cross-checked B3 issuer page (SBSP3).
- Sanepar · CNPJ 76.484.013/0001-45 — https://site.sanepar.com.br · cross-checked B3 issuer page (SAPR11).

### Transport
- LATAM Brasil (TAM Linhas Aéreas) · CNPJ 02.012.862/0001-60 — https://www.latam.com/pt_br · cross-checked ANAC operator registry.
- Gol Linhas Aéreas Inteligentes · CNPJ 06.164.253/0001-87 — https://www.voegol.com.br · cross-checked B3 issuer page (GOLL4).
- Azul · CNPJ 09.296.295/0001-60 — https://www.voeazul.com.br · cross-checked ANAC operator registry.

### Health
- Hospital Albert Einstein (SBIBHAE) · CNPJ 60.765.823/0001-30 — https://www.einstein.br · cross-checked Mapa das OSC (IPEA).
- Hapvida · CNPJ 63.554.067/0001-98 — https://www.hapvida.com.br · cross-checked ANS operator registry.
- Fiocruz · CNPJ 33.683.111/0001-07 — https://www.fiocruz.br (federal foundation, Ministério da Saúde).

### Public administration
- Ministério da Fazenda · CNPJ 00.394.460/0001-41 — https://www.gov.br/fazenda · cross-checked Portal da Transparência.
- Banco Central do Brasil · CNPJ 00.038.166/0001-05 — https://www.bcb.gov.br · cross-checked institutional documents.

### Digital infrastructure
- NIC.br / CGI.br · CNPJ 05.506.560/0001-36 — https://www.nic.br · operator's own institutional page.
- Locaweb · CNPJ 01.590.728/0001-08 — https://www.locaweb.com.br · cross-checked B3 issuer page (LWSA3).
- UOL · CNPJ 01.109.184/0001-04 — https://www.uol.com.br · cross-checked corporate footer.

## Notes on coverage and uncertainty

- **No closed federal OIV list.** Unlike Chile (ANCI Res Ex 87 · 915 OIVs)
  or upcoming sectoral lists, Brazil has not yet published a single
  closed registry of operadores de infraestrutura crítica. Coverage is
  inferred from sectoral regulators + criticality heuristics.

- **CNPJ matrix vs. filial.** Several large groups (Eletrobras, CCR,
  Polícia Federal, B3) operate via many CNPJs (matrix `0001` + numbered
  filiais). The dataset shows the most-commonly-cited matrix CNPJ per
  group; operational subsidiaries (e.g. Eletrobras Furnas, Eletronorte,
  Chesf) carry separate CNPJs that would expand the dataset 5-10× per
  parent if enumerated.

- **Mergers and acquisitions.** Brazilian utility consolidation (CESP →
  Auren · Embratel → Claro · NotreDame ↔ Hapvida) means several
  historical CNPJs remain active for legal continuity even when
  operations have moved to the surviving entity. Records flagged with
  `confidence < 0.8` typically reflect this status.

- **Sub-national operators under-represented.** State water utilities
  outside SP/MG/PR/RJ/DF/PE/CE/BA, regional distribution co-ops, and
  state-level data-processing companies (PRODESP, PRODAM, PRODABEL,
  CELEPAR, etc.) are deliberately deferred to a future contribution
  wave.

- **Defense and intelligence.** Beyond the apex CNPJs (Comando do
  Exército, Polícia Federal), subordinate cyber units (ComDCiber,
  CDCiber, ABIN) are not enumerated; their CNPJ relationships are not
  always public.

## License

The compiled dataset is released under Apache-2.0 in keeping with the
`latam-oiv-resolver` package license. All sources cited above remain
under their respective publishers' terms; this file constitutes
attribution-only re-use of publicly published identifier data.

## Last updated

2026-05-25 · v0 community-curated baseline · ~95 operators across 9 sectors.