Brazil (BR)

Scope: This law establishes the new legal framework for the Brazilian foreign exchange market. It covers operations involving foreign capital in Brazil, Brazilian capital abroad, and related reporting to the Central Bank.

Gap or ambiguity: The law provides a general framework for foreign exchange but does not explicitly mention crypto-assets. It delegates the definition of specific operational and security requirements for new FX modalities to the Central Bank.

Scope: This regulation establishes AML/KYC and financial-crime compliance policies. Its scope extends to Virtual Asset Service Providers (VASPs) by interpretation.

Gap or ambiguity: As a general financial crime rule extended to VASPs, it may lack specific technical standards for on-chain monitoring (KYT). This creates an opportunity for certifiers to establish best practices for compliance.

Scope: This guidance outlines the technical and security framework for Brazil's National Financial System Network (RSFN). It covers data communication, accredited IT service providers (PSTIs), and systems like the Pix instant payment network.

Gap or ambiguity: The text references a 'SFN Security Manual' but does not detail its specific requirements. A certifier would need to analyze the full manual to define the scope for compliance audits or accreditation support services for participants.

Scope: This rule delegates authority to the CVM's Superintendence of Securities Registration (SRE) to grant exemptions from registration for public offerings of certain open-end FIDC quotas, provided they follow the rules for restricted effort offerings.

Gap or ambiguity: The text is a procedural rule for traditional securities (FIDCs) and does not mention or apply to crypto-assets. It presents no gaps or opportunities for crypto-related certification.

Scope: This instruction regulates the disclosure of material facts by publicly-held companies. It also establishes rules and prohibitions on the trading of securities by insiders to prevent the use of privileged information.

Gap or ambiguity: The norm predates crypto-assets and does not address them. A key ambiguity is how its principles on material fact disclosure and insider trading apply to crypto-assets that may be deemed securities.

Scope: The provided text is a generic webpage from the Central Bank of Brazil and does not contain the substantive content of the regulation.

Scope: This resolution establishes a licensing framework for Virtual Asset Service Providers (VASPs) in Brazil. It defines VASP categories, operational rules, governance, and asset segregation requirements.

Gap or ambiguity: The norm requires a technical certification by an independent entity as a condition for operation. However, the specific technical standards and qualification criteria for this certification are yet to be defined in a future regulation.

Scope: This rule mandates the reporting of crypto-asset transactions to Brazil's federal tax authority (RFB). It applies to Brazilian exchanges and to individuals/entities transacting above a certain threshold on foreign exchanges or P2P.

Gap or ambiguity: The norm requires reporting the value of operations in BRL but does not specify a valuation methodology for non-fiat transactions like crypto-to-crypto swaps or donations. This creates a gap for standardized valuation practices.

Scope: This resolution establishes the guiding principles for operations in the foreign exchange market. It mandates that institutions must obtain prior authorization from the Central Bank of Brazil to operate.

Gap or ambiguity: The regulation sets high-level principles for security and compliance (Art. 3 & 4) without specifying technical standards. This leaves a gap for certifiers to define and audit best practices for meeting these principles.

Scope: This resolution amends several prior BCB norms to include virtual asset service providers (VASPs) authorized by the Central Bank of Brazil in their scopes of application.

Gap or ambiguity: The provided text is only a title and website boilerplate, not the regulation's substance. It is unclear which specific requirements from the nine amended resolutions will now apply to VASPs.

Scope: The provided text is a system error message and does not contain any regulatory content.

Gap or ambiguity: The text is a system error message ('Forbidden! You do not have permission...') and lacks any substantive information about the regulation.

Scope: The provided text is a search results page from the regulator's website. It does not contain the content of the specified norm and is unrelated to crypto-assets.

Scope: This resolution establishes the remuneration policy for administrators of traditional financial institutions, such as securities brokers and payment institutions.

Gap or ambiguity: The provided text does not address crypto-assets or related services. Its scope is limited to remuneration policies for specific, non-crypto financial entities.

Gap or ambiguity: The provided text is a '404 Not Found' error page from the regulator's website. The actual content of the regulation is missing, making its requirements indeterminable.

Scope: This resolution amends the general AML/CFT framework for financial institutions regulated by the Central Bank of Brazil. It refines client identification (KYC) and qualification procedures, such as assessing financial capacity.

Gap or ambiguity: The norm provides a general AML framework but lacks specific guidance for crypto-assets. It does not address how to apply traditional KYC principles to challenges like unhosted wallets or DeFi protocols.

Scope: This resolution sets principles and procedures for customer relationships for consortium administrators and payment institutions. It is a general conduct rule, not specific to crypto-assets.

Gap or ambiguity: The provided text does not contain the body of the regulation, only its title and website boilerplate. It is unclear how these general customer relationship principles apply to payment institutions that may offer crypto-asset services.

Scope: This regulation establishes the compliance policy requirements for consortium administrators and payment institutions authorized to operate by the Central Bank of Brazil.

Gap or ambiguity: The provided text is only a title and website boilerplate, not the regulation's content. It is unclear how these general compliance rules apply to the specific risks of crypto-asset operations.

Scope: This act excludes a specific legal entity from a special tax installment plan due to non-payment. The text does not contain any provisions related to crypto-assets.

Scope: This norm details the requirements for a mandatory technical certification by an independent firm. This certification is a prerequisite for entities seeking to provide crypto-asset intermediation and custody services in Brazil.

Gap or ambiguity: The regulation requires certification by an 'independent qualified company' but does not specify the required credentials or standards for the certifier. This creates an opportunity for firms to establish best practices and define what constitutes a qualified technical certification.

Scope: This law establishes the tax treatment for income earned by Brazilian residents from offshore investments. It equates crypto-assets held abroad with financial investments, subjecting them to a 15% income tax.

Gap or ambiguity: The law is focused on taxation and does not specify technical or operational requirements for crypto-asset platforms. It may create ambiguity regarding the valuation of crypto-assets for tax purposes.

Scope: This instruction establishes a simplified regime for public offerings of specific securities with restricted distribution efforts. These offerings are exempt from full registration but are limited to qualified investors.

Gap or ambiguity: The regulation was issued in 2009 and does not contemplate crypto-assets. It is unclear whether tokenized securities could qualify for this simplified offering regime, creating a significant regulatory gap.

Scope: This law establishes general capital gains tax rules for individuals. It is not specific to crypto but serves as the basis for taxing gains from crypto sales in Brazil.

Gap or ambiguity: The law is a general tax statute from 1995 and was not designed for crypto-assets. Its application to crypto is based on interpretation by tax authorities, which can create ambiguity.

Scope: This normative instruction by Brazil's tax authority (RFB) updates crypto-asset reporting requirements. It is set to supersede the previous rule (IN 1888) starting in 2025.

Gap or ambiguity: The provided text is a system error message, not the legal text of the regulation. No specific requirements, definitions, or technical standards can be determined from the input.

Scope: This regulation integrates Virtual Asset Service Providers (VASPs) into Brazil's foreign exchange market framework. It establishes rules and reporting requirements for international payments and transfers involving virtual assets.

Gap or ambiguity: Art. 30 allows the regulator to require a technical certification from an independent company for IT infrastructure. The specific standards for this certification are not defined, creating an opportunity for certifiers.

Scope: This resolution amends Brazil's foreign exchange (FX) market regulations. It updates the classification codes for reporting FX operations, including adding a specific code for 'Virtual assets'.

Gap or ambiguity: The rule adds a reporting code for 'Virtual assets' under 'Trade in goods' but fails to define the term. This creates ambiguity for FX operators on what qualifies and how to value such transactions.

Scope: This instruction regulates the tax declaration (DPREV) for pension plans, life insurance, and retirement funds. It is not related to crypto-assets.

Scope: This resolution amends regulations for foreign credit operations and the reporting of Brazilian capital abroad, specifically in the form of sustainable bonds. The text does not mention crypto-assets.

Gap or ambiguity: The provided text is website boilerplate and does not contain the actual normative content of the resolution. Analysis of specific requirements is not possible.

Scope: This resolution provides the general framework for investment funds in Brazil. It contains specific provisions for funds investing in crypto-assets.

Scope: This 2004 instruction establishes the general rules for the constitution, administration, operation, and registration of traditional investment funds in Brazil. It does not apply to specific fund types like private equity or real estate funds.

Gap or ambiguity: The regulation was written before the existence of crypto-assets and does not address them. This creates a gap regarding how crypto-assets should be classified, custodied, and risk-managed within the traditional fund structures it governs.

Scope: This resolution establishes rules for the internal control systems of consortium administrators and payment institutions authorized by the Central Bank of Brazil.

Gap or ambiguity: The regulation does not explicitly address crypto-assets. It focuses on internal controls for traditional financial entities, not crypto-asset service providers.

Scope: This rule waives the requirement for prior CVM approval of advertising materials for registered public offerings of securities. Materials must instead be submitted to the CVM within one business day after their use.

Gap or ambiguity: By shifting from pre-approval to post-review, the rule increases the liability of offering participants for non-compliant advertising. This creates an opportunity for independent review services to validate materials against CVM guidelines before publication.

Scope: This regulation provides procedures for taxpayers to challenge tax assessments from the Federal Revenue Secretariat. The text is unrelated to crypto-assets.

Scope: This resolution mandates internal audit activities for various financial institutions. An amendment will extend these requirements to virtual asset service providers (VASPs) starting in March 2026.

Gap or ambiguity: The rule requires internal audits to evaluate the 'safeguarding of assets' and the effectiveness of information systems. It lacks specific technical standards for auditing crypto-native systems, creating an opportunity for certifiers to establish best practices.

Scope: This resolution establishes mandatory reporting requirements for Brazilian residents holding assets abroad, including virtual assets. It defines the thresholds and deadlines for annual and quarterly declarations to the Central Bank of Brazil.

Gap or ambiguity: The regulation requires reporting on 'virtual assets' but does not provide a specific definition or a methodology for their valuation. This creates ambiguity for declarants and an opportunity for third-party services to establish consistent valuation practices for reporting.

Scope: This communiqué suspends the implementation of the SFTP service for file transfers within Brazil's National Financial System Network (RSFN). The norm is not related to crypto-assets.

Gap or ambiguity: The norm revokes previous deadlines and states that new dates and procedures will be disclosed in due course, creating uncertainty about the new implementation timeline.

Scope: This document is a catalog of technical specifications, manuals, and implementation timelines for services on Brazil's National Financial System Network (RSFN). It includes standards for systems like the Instant Payment System (SPI) and Pix.

Gap or ambiguity: The text references detailed security manuals (e.g., 'Pix Security Manual') but does not specify the required security validation or audit methodologies. Independent certifiers could offer services to validate compliance against these technical security standards.

Scope: This resolution amends CVM Resolution No. 88 of 2022. The text does not provide any further details on the substance of the amendment.

Gap or ambiguity: The provided text is only a notification of an amendment and does not contain the full regulatory text, making it impossible to identify specific gaps or ambiguities.

Scope: This guidance outlines technical and security standards for Brazil's National Financial System Network (RSFN). It covers IT service providers (PSTIs), the Pix instant payment system, and communication protocols.

Gap or ambiguity: The text references multiple security manuals but does not detail the specific controls within them. A certifier could audit participants against the detailed requirements in the SFN and Pix Security Manuals to ensure compliance.

Scope: This instruction regulated the constitution and operation of credit rights investment funds (FIDCs). The norm has been fully repealed by CVM Resolution 175/22.

Gap or ambiguity: This regulation is no longer in force and has been superseded. Therefore, there are no applicable gaps or ambiguities.

Scope: This regulation establishes the reporting requirements for foreign capital inflows into Brazil, specifically for external credit and foreign direct investment. An amendment brings operations involving virtual assets under this same reporting framework, effective May 2026.

Gap or ambiguity: The rule requires reporting the fiat currency value of virtual asset operations but does not specify the valuation methodology. This creates an opportunity for independent certifiers to provide standardized and auditable valuation services.

Scope: This law establishes Brazil's general anti-money laundering (AML) framework. It defines AML crimes and subjects various entities, including Virtual Asset Service Providers (VASPs), to monitoring and reporting obligations.

Gap or ambiguity: The law imposes high-level AML duties on VASPs but lacks specific technical requirements for risk assessment, transaction monitoring, or blockchain analytics. This gap leaves room for independent certifiers to validate the adequacy of a VASP's compliance program.

Scope: This rule governs public offerings of securities by small businesses conducted through electronic crowdfunding platforms, providing an exemption from standard registration requirements for the offering.

Scope: This rule prohibits investors from acquiring shares in a public offering if they have short-sold the same share on the pricing date or in the five preceding trading sessions. The goal is to protect the price formation process.

Gap or ambiguity: The instruction is specific to traditional shares and does not mention crypto-assets. It is unclear if or how these market conduct principles would apply to public offerings of crypto-assets.

Scope: This law establishes the Brazilian Securities and Exchange Commission (CVM) and provides the foundational legal framework for the securities market.

Gap or ambiguity: The law's 1976 definition of a security creates ambiguity when applied to crypto-assets. The CVM determines on a case-by-case basis whether a given token is a security, creating a need for legal analysis.

Scope: The provided text is a '404 - Page not found' error and does not contain the content of the regulation.

Gap or ambiguity: The regulatory text is missing from the source, making analysis impossible.

Scope: This 2005 deliberation delegates authority within the CVM to grant waivers for registration requirements related to public offerings of traditional securities. It does not apply to or regulate crypto-assets.

Gap or ambiguity: The regulation predates crypto-assets and is entirely focused on traditional securities markets. It offers no framework or guidance for digital assets, creating a complete regulatory gap within this specific text.

Scope: This law provides the general legal framework for the securitization of credit rights and the issuance of Receivables Certificates (CRs). It does not directly regulate crypto-assets.

Gap or ambiguity: The law regulates the underlying financial instruments but is silent on the specific requirements for their tokenization. This creates a gap regarding technical standards for representing these securities on a blockchain.

Scope: This deliberation establishes a temporary procedure for confidential analysis of registration requests for public offerings of traditional securities (shares). It does not regulate crypto-assets.

Gap or ambiguity: The regulation is specific to traditional securities offerings and does not apply to or mention crypto-assets, creating no direct opportunities or ambiguities for that sector.

Scope: This resolution establishes the high-level guidelines for the Central Bank of Brazil to regulate, oversee, and supervise payment institutions and payment arrangements. It covers principles, authorization requirements, and risk management.

Gap or ambiguity: The text is a high-level framework that sets general principles for risk management (operational, credit, liquidity) but lacks specific technical standards for cybersecurity. This requires further regulation to specify controls, which could be informed by independent certifiers.

Scope: This act is not related to crypto-assets. It cancels a previous 1999 act regarding the special registration of beverages for tax control purposes (IPI stamps).

Scope: The provided text is a '404 - Page not found' error and does not contain the content of the resolution.

Scope: This rule regulates public offerings of securities by small businesses through online investment crowdfunding platforms. It establishes an authorization regime for the platforms and a registration exemption for the offerings.

Gap or ambiguity: Art. 13 requires platforms to have 'adequate and verifiable' IT systems, but does not define technical standards for adequacy. This creates an opportunity for certifiers to provide assurance on system controls and security.

Scope: This act grants a specific income tax reduction to a hydroelectric company for the modernization of its industrial plant. It is not related to crypto-assets.

Scope: This resolution establishes the requirements, procedures, and conditions for the accreditation of Information Technology Service Providers (PSTI) within the Brazilian financial and payment systems.

Gap or ambiguity: The provided text is a website template, not the regulation's full body. The specific technical and procedural requirements for PSTI accreditation are not detailed.

Scope: This regulation establishes the Brazilian instant payment system, Pix. It defines the rules, participants, governance, and operational framework for 24/7 real-time fund transfers.

Gap or ambiguity: The regulation requires adherence to broad principles like a 'cybersecurity policy' detailed in separate technical manuals. This creates an opportunity for certifiers to audit participants against these specific security and operational standards.

Scope: This law establishes a licensing framework for Virtual Asset Service Providers (VASPs) in Brazil. It also criminalizes fraud involving virtual assets and subjects VASPs to national AML/CFT regulations.

Gap or ambiguity: The law is a high-level framework that delegates the creation of specific technical and operational requirements for licensing to a federal regulator. This gap leaves VASPs uncertain about the exact standards they must meet for authorization.

Scope: This instruction from 2008 regulates a simplified registration procedure for public offerings of traditional securities. It delegates the preliminary analysis of offerings to authorized self-regulatory entities.

Gap or ambiguity: The rule does not contemplate crypto-assets. The specific criteria for the technical report issued by the self-regulatory entity are defined in separate agreements with the CVM, not in the rule itself.

Scope: This resolution amends existing regulations on foreign capital in Brazil, focusing on external credit, direct foreign investment, and information reporting to the Central Bank.

Gap or ambiguity: The provided text does not concern crypto-assets. It exclusively addresses traditional finance matters related to foreign capital and investment.

Scope: This norm amends the Brazilian Penal Code to criminalize fraud committed through the use of virtual assets, securities, or financial assets. It establishes a penalty of 4 to 8 years of imprisonment plus a fine.

Gap or ambiguity: The law defines a criminal offense but does not establish preventive compliance requirements for businesses. This creates an opportunity for certifiers to attest to anti-fraud controls, helping companies mitigate legal and operational risks.

Scope: This resolution establishes general principles and procedures for financial institutions regarding their relationship with clients and users of products and services. It is not specific to crypto-assets.

Gap or ambiguity: The provided text is a generic webpage and does not contain the articles of the regulation. Its specific requirements and applicability to crypto-assets cannot be determined from the text.

Scope: This act declares a specific non-crypto company's tax registration as unfit for not being located at its registered address. It is not related to crypto-assets.

Scope: This resolution establishes the compliance policy for financial institutions and other institutions authorized to operate by the Central Bank of Brazil.

Gap or ambiguity: The provided text is a web page frame and does not contain the actual content of the resolution. Its specific applicability to crypto-asset service providers is therefore undetermined.

Scope: This act is a specific administrative declaration that nullifies the corporate registration changes of a non-crypto company. It does not regulate crypto-assets.

Scope: This regulation establishes general criteria for electronic data communication and requirements for IT service providers within the National Financial System (SFN). The text does not mention or apply to crypto-assets.

Gap or ambiguity: The regulation does not apply to crypto-assets or Virtual Asset Service Providers. It focuses on traditional IT providers for the conventional financial system, leaving specific requirements for the crypto sector to other regulations.

Scope: This is a public consultation on a proposal for the regulation of virtual assets. The provided text is a '404 - Page not found' error, so no specific details are available.

Scope: This regulation governs the process for public offerings of securities in Brazil's primary and secondary markets. It establishes the registration requirements with the CVM to ensure investor protection through disclosure.

Gap or ambiguity: The norm predates crypto-assets and does not specify how its requirements apply to public offerings of tokens deemed securities. It lacks technical standards for digital asset custody, issuance, and smart contract security.

Scope: This deliberation delegates authority to waive the economic-financial feasibility study for certain public offerings of traditional securities. It does not apply to or mention crypto-assets.

Gap or ambiguity: This text is from 2008 and is not relevant to crypto-asset regulation, presenting no specific gaps or opportunities in this sector.

Scope: The provided text is a system error message and does not contain the substantive content of the regulation.

Gap or ambiguity: The text is a system error message, not a regulatory text, so no analysis is possible.

Scope: The norm communicates an alteration and publication of the Domain Dictionary associated with the National Financial System (SFN) Services Catalog. The provided text is a generic guide on searching for norms.

Gap or ambiguity: The provided text does not contain the substantive content of the communiqué, making it impossible to analyze for specific requirements, gaps, or ambiguities.

Scope: This public consultation proposes rules for the recovery and resolution of financial institutions and other entities authorized by the Central Bank of Brazil.

Gap or ambiguity: The provided text is a 404 error page, so the actual content of the consultation could not be analyzed.

Scope: This resolution establishes the authorization and licensing process for Virtual Asset Service Providers (VASPs) and other financial brokerage firms in Brazil.

Gap or ambiguity: The norm allows the Central Bank to require certification from an 'independent qualified company' (Art. 2, §5) but does not define the standards for this certification or the criteria for a company to be considered qualified.

Scope: The provided text is a '404 - Page not found' error from the regulator's website. The content of the regulation could not be analyzed.

Scope: This resolution amends a prior rule to increase the institutional limit for spot foreign exchange operations to US$500,000. It does not pertain to crypto-assets.

Scope: This resolution establishes the general regime for public offerings of securities in Brazil. It applies to security tokens when they are offered to the public.

Gap or ambiguity: The provided text is only a header and does not contain substantive articles, so specific technical requirements or gaps cannot be identified.

Scope: The provided text is a '404 - Page not found' error from the regulator's website. It does not contain the substantive content of the regulation.

Scope: This resolution establishes a financial charge for the cancellation of foreign exchange contracts that support advances in local currency. It does not regulate crypto-assets.

Gap or ambiguity: The norm is specific to traditional foreign exchange markets and has no applicability or ambiguity regarding crypto-assets.

Scope: This communiqué announces procedures and deadlines for an update to the National Financial System (SFN) Services Catalog. The provided text does not contain specific rules for crypto-assets.

Gap or ambiguity: The provided text is website boilerplate and does not contain the substantive content of the communiqué, making it impossible to analyze for regulatory gaps.

Scope: The provided text is a '404 - Page not found' error and does not contain the content of the regulation.

Scope: This is a general consumer protection law that applies to the relationship between Virtual Asset Service Providers (VASPs) and their users. It governs aspects like service liability, advertising, and unfair contract terms.

Gap or ambiguity: The law's general principles, such as liability for service defects, are not defined for the technical specifics of crypto-assets. This creates ambiguity in how to apply them to issues like smart contract bugs or custody failures.

Scope: This guidance consolidates the CVM's position on when crypto-assets are considered securities. It applies a functional, substance-over-form test to make this determination.

Gap or ambiguity: The application of a principles-based functional test creates legal uncertainty for specific crypto-assets. This creates a need for independent expert analysis to assess if a token qualifies as a security.

Scope: This regulation provides definitions for 'chassis truck' and 'monoblock truck' for the purposes of industrial product taxation. It is unrelated to crypto-assets.

Scope: This law provides general rules for the protection of personal data. It applies to any operation that processes personal data in Brazil, including for KYC and client onboarding.

Gap or ambiguity: The law sets high-level data security principles but does not prescribe specific technical standards for the crypto sector. This creates an opportunity for certifiers to audit against best practices for LGPD compliance.

Scope: This instruction sets deadlines for corporate tax filings following events like mergers, spin-offs, or dissolutions. It does not pertain to crypto-assets.

Gap or ambiguity: The text is a general corporate tax rule from 2003, which has since been revoked, and does not address crypto-assets in any capacity.

Scope: This norm regulates the tax treatment for Brazilian residents on income from financial assets held abroad. The scope explicitly includes crypto-assets held with foreign institutions.

Gap or ambiguity: The regulation requires declaration of offshore crypto-assets but may not specify valuation methodologies for illiquid or complex assets. This creates an opportunity for independent valuation services to support tax compliance.

Scope: The provided text is a generic webpage template from the Central Bank of Brazil and does not contain the substantive content of the regulation.

Scope: This resolution regulates the Brazilian foreign exchange (FX) market. It was amended to include virtual asset services, establishing an authorization regime for VASPs to operate within the FX framework.

Gap or ambiguity: Art. 30 allows the Central Bank to request a "technical certification or evaluation" from an independent company to assess an applicant's IT infrastructure. The specific standards for this certification are not defined, creating an opportunity for certifiers.

Scope: This law defines crimes against the Brazilian national financial system. It was amended to criminalize the operation of a virtual asset service provider (VASP) without prior authorization.

Gap or ambiguity: The law establishes the crime of operating an unauthorized VASP but does not specify the technical or governance requirements for obtaining such authorization, which are defined elsewhere.

Scope: This norm details the procedural requirements, documents, and deadlines for virtual asset service providers (VASPs) to apply for an operating license in Brazil. It includes a specific two-phase transition plan for VASPs already in operation.

Gap or ambiguity: The regulation requires a description of IT infrastructure and internal controls but lacks specific technical standards or security benchmarks (e.g., ISO 27001, SOC 2). An independent certification could help applicants demonstrate robustness and fill this gap for the regulator.

Scope: This instruction provides for the 2002 Annual Exempt Declaration for individuals exempt from the standard income tax filing. The text is unrelated to crypto-assets.

Scope: This resolution amends regulations on foreign capital in Brazil, external credit, and foreign direct investment reporting. The text does not address crypto-assets.

Scope: This resolution establishes a mandatory cybersecurity policy for payment institutions and other regulated entities, including virtual asset service providers from 2026. It details requirements for risk management, incident response, and contracting cloud services.

Gap or ambiguity: The rule requires institutions to review audit reports from their cloud/data service providers (Art. 12.II.e) but does not specify the required audit standards. This creates an opportunity for certifiers to establish a market-accepted standard.

Scope: This ordinance approves the internal regulations of the Federal Revenue Secretariat. The provided text is actually from a subsequent Normative Instruction (IN SRF 230/2002) which details the procedure for tax inquiries and has since been revoked.

Gap or ambiguity: This text is procedural, related to tax inquiries, and does not regulate crypto-assets. It presents no specific regulatory gap or opportunity for a certifier in the crypto space.

Scope: The provided text is a '404 Page not found' error. The title indicates it is a public consultation on recovery and resolution for financial institutions.

Gap or ambiguity: The substantive content of the public consultation is missing, as the provided text is a 404 error page. No analysis of specific requirements is possible.

Scope: This decree designates the Central Bank of Brazil (BCB) as the regulator responsible for authorizing and supervising virtual asset service providers, implementing Law 14,478/2022.

Gap or ambiguity: The decree is a high-level delegation of power and does not specify the detailed technical or operational requirements for licensing. These standards are left for the Central Bank to define in future regulations.

Scope: This law defines terrorism and the financing of terrorism as crimes in Brazil. It establishes the legal framework and penalties for such activities.

Gap or ambiguity: The law does not explicitly mention virtual assets. Its application to crypto-related financing activities is subject to interpretation by regulators and courts.

Scope: This law establishes the legal framework for payment arrangements and payment institutions, which require Central Bank authorization to operate within the Brazilian Payment System (SPB).

Gap or ambiguity: The law predates modern crypto-assets and does not directly address them. Its application to crypto firms that also provide payment services depends on interpretation and subsequent Central Bank regulations.

Scope: This regulation establishes the administrative procedure for taxpayers to correct errors in filling out Federal Revenue Collection Documents (Darf and Darf-Simples).

Gap or ambiguity: The text is unrelated to crypto-assets, virtual assets, or their service providers, focusing exclusively on general tax collection procedures.

Scope: This resolution regulates transitional provisions for foreign capital, external credit, and foreign direct investment operations under Brazil's new foreign exchange law. It is not related to crypto-assets.

Gap or ambiguity: The provided text does not regulate crypto-assets, therefore no gaps or ambiguities related to this topic can be identified from it.

Scope: This resolution establishes rules for independent audit services for authorized institutions, including payment institutions. It covers auditor independence, mandatory replacement, and the creation of audit committees.

Gap or ambiguity: The norm requires a report on internal control systems, including electronic data processing systems (Art. 21.II.b), but does not specify technical standards. This creates an opportunity for certifiers to apply recognized frameworks (e.g., ISO, NIST) for these assessments.

Scope: The provided text is a website template from the Brazilian Central Bank and does not contain the substantive content of the communiqué.

Gap or ambiguity: The regulatory content of the communiqué is missing from the provided text, making it impossible to identify any gaps or ambiguities.

Scope: This resolution establishes a cybersecurity policy and requirements for contracting cloud computing services for financial institutions. It mandates risk management, incident response plans, and specific security controls.

Gap or ambiguity: The norm requires institutions to verify cloud providers' certifications (Art. 12.II.d) and audit reports (Art. 12.II.e) but does not specify which standards are acceptable. This creates an opportunity for certifiers to establish benchmarks for the financial sector.